Setuptools (Python) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 628 known versions, newest CVE from 2026-07-08. Vendor: Python.

CVEs of Setuptools

• CVE-2026-59890 - CVSS 6.1 (medium), 2026-07-08: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in…
• CVE-2025-47273 - CVSS 8.8 (high), 2025-05-17: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in…
• CVE-2024-6345 - CVSS 8.8 (high), 2024-07-15: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These…
• CVE-2022-40897 - CVSS 5.9 (medium), 2022-12-23: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom…
• CVE-2013-1633 - CVSS 6.8 (medium), 2013-08-06: easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents,…