HIGH8.3PyPI
GHSA-27x4-j476-jp5f· CVE-2013-1633, PYSEC-2013-22Setuptools vulnerable to Man-in-the-middle attacks
Modified: 10/22/2024
package
pkg:pypi/setuptools
Setuptools vulnerable to Man-in-the-middle attacks
Modified: 10/22/2024
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
Modified: 9/10/2026
setuptools vulnerable to Command Injection via package URL
Modified: 9/10/2026
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Modified: 9/10/2026
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Modified: 8/7/2026
Modified: 6/10/2026
Modified: 6/10/2026
Modified: 5/11/2026
setuptools vulnerable to Command Injection via package URL
Modified: 7/7/2026
Modified: 7/14/2026