autodoraemon (>=1.0.0, <=1.0.8), dash-tools (>=0.16.0, <=1.8.2) +3 more potentially affected by CVE-2022-40897 via setuptools (47.1.0)

setuptools PYPI version 47.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - autodoraemon =1.0.0, =0.16.0, =0.0.2, =1.0.1, =1.0.35 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

eje (2.1.0), evascanner (>=1.3.0, <=1.5.2) +7 more potentially affected by CVE-2022-40897 via setuptools (44.1.1)

setuptools PYPI version 44.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - eje 2.1.0 - evascanner =1.3.0, =2.0.0a1, =1.0.7, =8.0.0, =8.2.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

aws-data-mesh-utils (>=1.0.0, <=1.0.3), excel-transform (>=1.1.0, <=1.1.5) +2 more potentially affected by CVE-2022-40897 via setuptools (54.1.3)

setuptools PYPI version 54.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aws-data-mesh-utils =1.0.0, =1.1.0, =1.0.4.dev3, =1.0.4.dev8 - medicine 0.1.9 Source cves: CVE-2022-40897 Source advisory:...

an-website (>=22.6.13, <=22.6.25), avrofastapi (0.0.1) +9 more potentially affected by CVE-2022-40897 via setuptools (62.3.4)

setuptools PYPI version 62.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.6.13, =4.0.1, =0.0.1, =0.9.47, =0.4.10, =4.0.0, =2.3.0, =0.1.0, =0.1.1 Source cves: CVE-2022-40897 Source advisory:...

elementary-flask (>=0.0.1.dev7, <=0.0.1.dev12), flarestack (2.4.2) +18 more potentially affected by CVE-2022-40897 via setuptools (62.0.0)

setuptools PYPI version 62.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - elementary-flask =0.0.1.dev7, =4.4.0a1, =3.0.1, =0.1.0, =0.12.0, =0.8.0, =1.4.0, =2.7.0, =2.13.0, =1.8.1, =0.3.1, =2.0.0a1, =3.3.0, =3.6.1...

mootdx (>=0.6.9, <=0.7.8) potentially affected by CVE-2022-40897 via setuptools (56.1.0)

setuptools PYPI version 56.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - mootdx =0.6.9, =0.7.8 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

apidriver (>=0.6.5, <=0.9.1), classification-model (0.0.1) +27 more potentially affected by CVE-2022-40897 via setuptools (56.0.0)

setuptools PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apidriver =0.6.5, =3.33.0, =0.41.1, =10.0.0, =0.0.3.6, =1.2.3, =1.0.0, =0.0.18, =1.0.0, =1.4.13, =1.4.29 and more Source cves: CVE-2022-408...

pex (>=1.1.6, <=1.1.15) potentially affected by CVE-2022-40897 via setuptools (20.10.1)

setuptools PYPI version 20.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pex =1.1.6, =1.1.15 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

ngsqc (0.1.1) potentially affected by CVE-2022-40897 via setuptools (20.2.2)

setuptools PYPI version 20.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ngsqc 0.1.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

coala (>=0.4.2.dev20160317151543, <=0.4.2.dev20160317165437), pex (>=1.1.2, <=1.1.5) +1 more potentially affected by CVE-2022-40897 via setuptools (19.7.0)

setuptools PYPI version 19.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - coala =0.4.2.dev20160317151543, =1.1.2, =1.1.5 - pyprint 0.2.2 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

karellen-stack-core (0.0.1.dev20161001024730) potentially affected by CVE-2022-40897 via setuptools (27.3.1)

setuptools PYPI version 27.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - karellen-stack-core 0.0.1.dev20161001024730 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

alphatrade (1.0.0), apteryx-transformers (>=0.1.0, <=0.1.5) +42 more potentially affected by CVE-2022-40897 via setuptools (57.5.0)

setuptools PYPI version 57.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - alphatrade 1.0.0 - apteryx-transformers =0.1.0, =0.1.0, =0.1.1, =0.0.6, =0.6.1, =0.1.1, =0.1.0, =0.3.0, =0.1.0, =0.2.1 and more Source cves...

binance-us-client (>=0.0.1, <=0.0.8.3), cumulusci (>=3.39.0, <=3.39.1) +10 more potentially affected by CVE-2022-40897 via setuptools (57.1.0)

setuptools PYPI version 57.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - binance-us-client =0.0.1, =3.39.0, =0.2.5.1, =0.0.1, =0.0.1, =0.0.14, =1.0.4.1, =1.0.0, =0.1.3, =0.0.1, =0.0.4 Source cves: CVE-2022-40897...

GHSA-R9HX-VWMV-Q579 pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Python Packaging Authority PyPA's setuptools is a library designed to facilitate packaging Python projects. Setuptools version 65.5.0 and earlier could allow remote attackers to cause a denial of service by fetching malicious HTML from a PyPI package or custom PackageIndex page due to a vulnerabl...

bloomtechlib (0.0.1) potentially affected by CVE-2022-40897 via setuptools (50.0.3)

setuptools PYPI version 50.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bloomtechlib 0.0.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

bolinette (>=0.12.1, <=0.14.0) potentially affected by CVE-2022-40897 via setuptools (58.5.2)

setuptools PYPI version 58.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bolinette =0.12.1, =0.14.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

scikit-build (0.3.0) potentially affected by CVE-2022-40897 via setuptools (27.2.0)

setuptools PYPI version 27.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - scikit-build 0.3.0 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

seqslab-cli (>=3.2.1.post0, <=3.2.5) potentially affected by CVE-2022-40897 via setuptools (59.0.1)

setuptools PYPI version 59.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - seqslab-cli =3.2.1.post0, =3.2.5 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

archetypal (>=2.1.0, <=2.16.1), cumulusci (>=3.35.0.dev0, <=3.36.0.dev1) +23 more potentially affected by CVE-2022-40897 via setuptools (56.2.0)

setuptools PYPI version 56.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal =2.1.0, =3.35.0.dev0, =0.0.12, =1.0.0b2, =0.1.0, =0.2.0, =2.0.8, =0.2.0, =2.2.1, =0.0.3, =2.5.0, =2.5.0, =2.6.1 and more Source...

essencebinder (0.1.1.dev0), psycho (>=2.1.5, <=2.2.0) +1 more potentially affected by CVE-2022-40897 via setuptools (61.0.0)

setuptools PYPI version 61.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - essencebinder 0.1.1.dev0 - psycho =2.1.5, =0.3.0.dev0, =0.3.0.dev4 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...