alphadoc (>=1.0.1, <=1.0.3), apexomni-arm (>=1.0.0, <=3.0.0) +65 more potentially affected by CVE-2022-40897 via setuptools (50.3.2)

setuptools PYPI version 50.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - alphadoc =1.0.1, =1.0.0, =3.0.0, =1.1.9, =0.1.1, =0.0.0a1, =0.5.5, =0.0.3, =0.0.1, =0.2.1, =0.1.8, =0.2.1 and more Source cves:...

lore (0.5.12) potentially affected by CVE-2022-40897 via setuptools (60.7.0)

setuptools PYPI version 60.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - lore 0.5.12 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

archetypal (2.13.0), freeflux (>=0.3.7, <=0.3.8) +6 more potentially affected by CVE-2022-40897 via setuptools (64.0.3)

setuptools PYPI version 64.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal 2.13.0 - freeflux =0.3.7, =1.0.17, =1.0.10, =0.1.0rc1, =0.3.1, =0.6.5 Source cves: CVE-2022-40897 Source advisory:...

openslides (>=2.1.0b3, <=2.1.1), openslides-votecollector (>=2.0.1, <=2.0.2) potentially affected by CVE-2022-40897 via setuptools (34.4.1)

setuptools PYPI version 34.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides =2.1.0b3, =2.0.1, =2.0.2 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

batchkit-examples-speechsdk (0.9.1), stringlifier (>=0.1.0.0, <=0.1.0.9) potentially affected by CVE-2022-40897 via setuptools (46.0.0)

setuptools PYPI version 46.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - batchkit-examples-speechsdk 0.9.1 - stringlifier =0.1.0.0, =0.1.0.9 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

abstracttradesimplet (>=0.1.18, <=0.1.22) potentially affected by CVE-2022-40897 via setuptools (59.1.1)

setuptools PYPI version 59.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - abstracttradesimplet =0.1.18, =0.1.22 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

azoo (1.2.2), ccxt (>=1.11.1, <=1.12.1) +1 more potentially affected by CVE-2022-40897 via setuptools (38.5.1)

setuptools PYPI version 38.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - azoo 1.2.2 - ccxt =1.11.1, =1.12.1 - nxviz 0.3.6 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

keepcli (>=1.0.0rc1, <=1.0.1) potentially affected by CVE-2022-40897 via setuptools (34.4.0)

setuptools PYPI version 34.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - keepcli =1.0.0rc1, =1.0.1 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

DEBIAN-CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

alphatrade (1.0.0), apteryx-transformers (>=0.1.0, <=0.1.5) +42 more potentially affected by CVE-2022-40897 via setuptools (57.5.0)

setuptools PYPI version 57.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - alphatrade 1.0.0 - apteryx-transformers =0.1.0, =0.1.0, =0.1.1, =0.0.6, =0.6.1, =0.1.1, =0.1.0, =0.3.0, =0.1.0, =0.2.1 and more Source cves...

h3mlcore (0.81.0.dev0), nxviz (>=0.3.2, <=0.3.3) +1 more potentially affected by CVE-2022-40897 via setuptools (36.5.0)

setuptools PYPI version 36.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - h3mlcore 0.81.0.dev0 - nxviz =0.3.2, =0.2.1, =0.2.2 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

bentodev (>=0.1.17, <=2018.11.2), uranium (>=1.2.0, <=1.7.1) potentially affected by CVE-2022-40897 via setuptools (35.0.1)

setuptools PYPI version 35.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bentodev =0.1.17, =1.2.0, =1.7.1 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

hspylib (0.11.73), hspylib-firebase (0.9.46) +1 more potentially affected by CVE-2022-40897 via setuptools (62.4.0)

setuptools PYPI version 62.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - hspylib 0.11.73 - hspylib-firebase 0.9.46 - hspylib-kafman 0.9.53 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

bolinette (>=0.8.0, <=0.10.0), mosartwmpy (>=0.0.1, <=0.0.3) potentially affected by CVE-2022-40897 via setuptools (54.1.2)

setuptools PYPI version 54.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bolinette =0.8.0, =0.0.1, =0.0.3 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

aitest-cli (>=0.0.7, <=0.0.9), geonode (4.4.5) potentially affected by CVE-2022-40897 via setuptools (63.0.0)

setuptools PYPI version 63.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aitest-cli =0.0.7, =0.0.9 - geonode 4.4.5 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

aioload (0.3.2), fastgraphml (0.0.0) +6 more potentially affected by CVE-2022-40897 via setuptools (45.0.0)

setuptools PYPI version 45.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aioload 0.3.2 - fastgraphml 0.0.0 - graph-sc =0.0.1, =0.3.13, =0.3.16 - spriteutil-intek-2020-nqcuong96 1.0.0 Source cves: CVE-2022-40897...

bolinette (0.7.7), pygevo (0.0.2) potentially affected by CVE-2022-40897 via setuptools (54.1.1)

setuptools PYPI version 54.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bolinette 0.7.7 - pygevo 0.0.2 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

cvexplore (>=0.2.6.2, <=0.2.6.7) potentially affected by CVE-2022-40897 via setuptools (58.0.2)

setuptools PYPI version 58.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.2, =0.2.6.7 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

acedb (>=0.1.0, <=0.1.6), adventofcode-initializer (>=1.0.1, <=1.0.5) +166 more potentially affected by CVE-2022-40897 via setuptools (>=65.0.0, <=65.5.0)

setuptools PYPI version =65.0.0, =0.1.0, =1.0.1, =0.0.1, =0.1.0, =0.1.3b0, =0.0.1, =0.89.0, =0.195.0, =0.3.1, =1.0.4, =1.6.37, =0.7.18, =0.7.19 and more Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...