HIGH8.3PyPI
GHSA-27x4-j476-jp5f· CVE-2013-1633, PYSEC-2013-22Setuptools vulnerable to Man-in-the-middle attacks
Modified: 10/22/2024
package
PyPI/setuptools
pkg:pypi/setuptools
HIGHPyPI
GHSA-5rjg-fvgr-3xxf· BIT-setuptools-2025-47273, CVE-2025-47273setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-cx63-2mw6-8hw5· BIT-setuptools-2024-6345, CVE-2024-6345setuptools vulnerable to Command Injection via package URL
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-h35f-9h28-mq5c· BIT-setuptools-2026-59890, CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-r9hx-vwmv-q579· BIT-setuptools-2022-40897, CVE-2022-40897pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Modified: 8/7/2026
—PyPI
PYSEC-2013-22· CVE-2013-1633, GHSA-27x4-j476-jp5fModified: 6/10/2026
—PyPI
PYSEC-2022-43012· BIT-setuptools-2022-40897, CVE-2022-40897Modified: 6/10/2026
HIGH8.8PyPI
PYSEC-2025-49· BIT-setuptools-2025-47273, CVE-2025-47273Modified: 5/11/2026
HIGH8.8PyPI
PYSEC-2026-1918· BIT-setuptools-2024-6345, CVE-2024-6345setuptools vulnerable to Command Injection via package URL
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-3447· BIT-setuptools-2026-59890, CVE-2026-59890Modified: 7/14/2026