rpm package
almalinux/python3.12-setuptools-wheel
pkg:rpm/almalinux/python3.12-setuptools-wheel
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-47273 | — | < 68.2.2-5.el8_10 | 68.2.2-5.el8_10 | May 17, 2025 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on | ||
| CVE-2024-6345 | Hig | 8.8 | < 68.2.2-4.el8_10 | 68.2.2-4.el8_10 | Jul 15, 2024 | A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti |
- CVE-2025-47273May 17, 2025affected < 68.2.2-5.el8_10fixed 68.2.2-5.el8_10
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on
- affected < 68.2.2-4.el8_10fixed 68.2.2-4.el8_10
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti