python-mu (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-6345 via setuptools (18.4.0)

setuptools PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - python-mu =1.0.1, =1.0.3 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

uranium (>=0.2.23, <=0.2.34) potentially affected by CVE-2024-6345 via setuptools (18.2.0)

setuptools PYPI version 18.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - uranium =0.2.23, =0.2.34 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

planadversity (1.0.2), uranium (>=0.2.10, <=0.2.22) potentially affected by CVE-2024-6345 via setuptools (18.0.1)

setuptools PYPI version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - planadversity 1.0.2 - uranium =0.2.10, =0.2.22 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

pex (>=0.8.2, <=0.8.6) potentially affected by CVE-2024-6345 via setuptools (7.0.0)

setuptools PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.8.2, =0.8.6 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

setuptools vulnerable to Command Injection via package URL

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

pex (>=0.9.0, <=1.1.1), revscoring (>=0.6.4, <=2.0.4) +3 more potentially affected by CVE-2024-6345 via setuptools (15.2.0)

setuptools PYPI version 15.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =0.9.0, =0.6.4, =1.4.1, =0.3.0, =0.3.2 - yt-formula-node 0.0.4 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

GHSA-CX63-2MW6-8HW5 setuptools vulnerable to Command Injection via package URL

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

binance-us-client (>=0.0.1, <=0.0.8.3), cumulusci (>=3.39.0, <=3.39.1) +10 more potentially affected by CVE-2024-6345 via setuptools (57.1.0)

setuptools PYPI version 57.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - binance-us-client =0.0.1, =3.39.0, =0.2.5.1, =0.0.1, =0.0.1, =0.0.14, =1.0.4.1, =1.0.0, =0.1.3, =0.0.1, =0.0.4 Source cves: CVE-2024-6345...

bigeye-airflow1 (>=0.0.25, <=0.0.28), bsw-code-gen (>=0.1.5, <=0.1.8) +48 more potentially affected by CVE-2024-6345 via setuptools (57.0.0)

setuptools PYPI version 57.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bigeye-airflow1 =0.0.25, =0.1.5, =0.0.3, =0.8.0, =3.36.0.dev2, =0.1.8, =2.2.0, =0.0.1, =1.0.1, =0.0.4, =1.0.4, =0.3.9, =0.3.11 - eisenradio...

archetypal (>=2.1.0, <=2.16.1), cumulusci (>=3.35.0.dev0, <=3.36.0.dev1) +23 more potentially affected by CVE-2024-6345 via setuptools (56.2.0)

setuptools PYPI version 56.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal =2.1.0, =3.35.0.dev0, =0.0.12, =1.0.0b2, =0.1.0, =0.2.0, =2.0.8, =0.2.0, =2.2.1, =0.0.3, =2.5.0, =2.5.0, =2.6.1 and more Source...

mootdx (>=0.6.9, <=0.7.8) potentially affected by CVE-2024-6345 via setuptools (56.1.0)

setuptools PYPI version 56.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - mootdx =0.6.9, =0.7.8 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

apidriver (>=0.6.5, <=0.9.1), classification-model (0.0.1) +27 more potentially affected by CVE-2024-6345 via setuptools (56.0.0)

setuptools PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apidriver =0.6.5, =3.33.0, =0.41.1, =10.0.0, =0.0.3.6, =1.2.3, =1.0.0, =0.0.18, =1.0.0, =1.4.13, =1.4.29 and more Source cves: CVE-2024-634...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2024-6345 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

bolinette (>=0.8.0, <=0.10.0), mosartwmpy (>=0.0.1, <=0.0.3) potentially affected by CVE-2024-6345 via setuptools (54.1.2)

setuptools PYPI version 54.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bolinette =0.8.0, =0.0.1, =0.0.3 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

steady-cell-phenotype (>=0.3.0, <=0.3.1) potentially affected by CVE-2024-6345 via setuptools (54.0.0)

setuptools PYPI version 54.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - steady-cell-phenotype =0.3.0, =0.3.1 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

commandfrog (>=0.2.1, <=0.3.1), elasticlogger (2.4.0) +4 more potentially affected by CVE-2024-6345 via setuptools (53.1.0)

setuptools PYPI version 53.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - commandfrog =0.2.1, =0.8.0, =0.1.30, =0.20.1, =0.24.2 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

atacworks (0.3.4), bigraph (>=0.1.0rc5, <=0.1.0rc7) +8 more potentially affected by CVE-2024-6345 via setuptools (51.1.2)

setuptools PYPI version 51.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - atacworks 0.3.4 - bigraph =0.1.0rc5, =0.7.5, =2.0.7, =0.1.3, =0.0.1, =0.1.3, =1.11.69, =0.1.0, =1.0.5, =1.0.8.1 Source cves: CVE-2024-6345...

eje (2.1.0), evascanner (>=1.3.0, <=1.5.2) +7 more potentially affected by CVE-2024-6345 via setuptools (44.1.1)

setuptools PYPI version 44.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - eje 2.1.0 - evascanner =1.3.0, =2.0.0a1, =1.0.7, =8.0.0, =8.2.0 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

pickley (2.0.14) potentially affected by CVE-2024-6345 via setuptools (44.1.0)

setuptools PYPI version 44.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pickley 2.0.14 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

cr-api-client (>=1.9.1, <=5.1.7), drb-impl-image (>=1.0.0a3, <=1.0.0b2) +33 more potentially affected by CVE-2024-6345 via setuptools (44.0.0)

setuptools PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cr-api-client =1.9.1, =1.0.0a3, =1.0.0b1, =1.0.2, =1.0.1, =4.9.0, =1.3.15.8, =0.6.2, =1.26.0, =1.26.0, =1.26.0, =1.28.0 and more Source cve...