Login Request a demo
SE
Product
Setuptools
by Python · last CVE Jul 8, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities5Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Setuptools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47273
8.8
2%
May 17
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
Affected: before 78.1.1
CVE-2024-6345
8.8
2%
Jul 15
Remote Code Execution in pypa/setuptools
Affected: 69.1.1 before 70.0
CVE-2026-59890
6.1
0%
Jul 8
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Affected: before 83.0.0
CVE-2022-40897
5.9
3%
Dec 23
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page
Affected: before 65.5.1
CVE-2013-1633
–
2%
Aug 6
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows…
Affected: through 0.7b4; 0.6.40; 0.6.41; 0.6.42; 0.6.43; 0.6.44; +5 more
Showing 5