cvexplore (>=0.2.6.2, <=0.2.6.7) potentially affected by CVE-2022-40897 via setuptools (58.0.2)

setuptools PYPI version 58.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.2, =0.2.6.7 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

catapult-api (0.6.3), cumulusci (>=3.44.0.dev1, <=3.44.0) potentially affected by CVE-2022-40897 via setuptools (58.0.3)

setuptools PYPI version 58.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - catapult-api 0.6.3 - cumulusci =3.44.0.dev1, =3.44.0 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

UBUNTU-CVE-2022-40897

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

PYSEC-2022-43012

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

Denial of service

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

PYSEC-2022-43012

Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service ReDoS in packageindex.py...

osrsreboxed (>=2.3.8, <=2.3.33) potentially affected by CVE-2022-40897 via setuptools (60.0.0)

setuptools PYPI version 60.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - osrsreboxed =2.3.8, =2.3.33 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

clean-cybersource-rest-client-python (>=0.0.19, <=0.0.22), ozon-api-client (0.1.10) +2 more potentially affected by CVE-2022-40897 via setuptools (21.0.0)

setuptools PYPI version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - clean-cybersource-rest-client-python =0.0.19, =3.8.0, =3.9.0 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2022-40897 via setuptools (63.4.2)

setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

zshot (>=0.0.1rc0, <=0.0.7) potentially affected by CVE-2022-40897 via setuptools (60.0.5)

setuptools PYPI version 60.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - zshot =0.0.1rc0, =0.0.7 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

tiatoolbox (>=0.2.0, <=0.3.0) potentially affected by CVE-2022-40897 via setuptools (45.1.0)

setuptools PYPI version 45.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - tiatoolbox =0.2.0, =0.3.0 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2022-40897 via setuptools (62.3.3)

setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

eje (2.1.0), evascanner (>=1.3.0, <=1.5.2) +7 more potentially affected by CVE-2022-40897 via setuptools (44.1.1)

setuptools PYPI version 44.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - eje 2.1.0 - evascanner =1.3.0, =2.0.0a1, =1.0.7, =8.0.0, =8.2.0 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

appsquared (>=0.1.1, <=1.1.1), armadilloml (>=0.1.3, <=0.1.7) +6 more potentially affected by CVE-2022-40897 via setuptools (61.3.1)

setuptools PYPI version 61.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - appsquared =0.1.1, =0.1.3, =0.1.0, =1.0.2, =1.0.2, =0.2.0, =0.3.1 - sentraltimetable 2022.0.7 Source cves: CVE-2022-40897 Source advisory:...

apidriver (>=0.6.5, <=0.9.1), classification-model (0.0.1) +27 more potentially affected by CVE-2022-40897 via setuptools (56.0.0)

setuptools PYPI version 56.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - apidriver =0.6.5, =3.33.0, =0.41.1, =10.0.0, =0.0.3.6, =1.2.3, =1.0.0, =0.0.18, =1.0.0, =1.4.13, =1.4.29 and more Source cves: CVE-2022-408...

archetypal (2.13.0), freeflux (>=0.3.7, <=0.3.8) +6 more potentially affected by CVE-2022-40897 via setuptools (64.0.3)

setuptools PYPI version 64.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - archetypal 2.13.0 - freeflux =0.3.7, =1.0.17, =1.0.10, =0.1.0rc1, =0.3.1, =0.6.5 Source cves: CVE-2022-40897 Source advisory:...

pybeandi (>=0.0.9, <=0.0.12) potentially affected by CVE-2022-40897 via setuptools (46.2.0)

setuptools PYPI version 46.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pybeandi =0.0.9, =0.0.12 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

crossbar (17.3.1) potentially affected by CVE-2022-40897 via setuptools (34.3.3)

setuptools PYPI version 34.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - crossbar 17.3.1 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

stapy (>=0.2.6, <=0.3.0) potentially affected by CVE-2022-40897 via setuptools (59.3.0)

setuptools PYPI version 59.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - stapy =0.2.6, =0.3.0 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

optimuspyspark (2.1.1), pantsbuild-pants (1.15.0) +20 more potentially affected by CVE-2022-40897 via setuptools (40.4.3)

setuptools PYPI version 40.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - optimuspyspark 2.1.1 - pantsbuild-pants 1.15.0 - pantsbuild-pants-contrib-avro 1.15.0 - pantsbuild-pants-contrib-awslambda-python 1.15.0 -...