Vulnerabilidades de pypa setuptools (CVE)

Registros CVE publicados para pypa setuptools, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

6.1Media

CVE-2026-59890 hace 4 meses

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

pypa setuptools

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns ag…

7.7Alta

CVE-2025-47273 hace 1 año

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

pypa setuptools

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

1.6%EPSS