rpm package
suse/python3-setuptools-test&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5
pkg:rpm/suse/python3-setuptools-test&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-6345 | Hig | 8.8 | < 44.1.1-150400.9.9.1 | 44.1.1-150400.9.9.1 | Jul 15, 2024 | A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti | |
| CVE-2022-40897 | — | < 44.1.1-150400.9.6.1 | 44.1.1-150400.9.6.1 | Dec 22, 2022 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. |
- affected < 44.1.1-150400.9.9.1fixed 44.1.1-150400.9.9.1
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are suscepti
- CVE-2022-40897Dec 22, 2022affected < 44.1.1-150400.9.6.1fixed 44.1.1-150400.9.6.1
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.