setuptools vulnerabilities
CVEs whose affected-version data names the setuptools package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-xmj3-9gf7-h52wLowsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
▾ Sunlitsetuptools · setuptoolsvia OSV
CVE-2022-40897High· 7.5pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
▾ Twilightsetuptools · setuptoolsEPSS 2.6%via OSV