CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 18 Last 7 days 2,786 Total CVEs 401,148 CISA KEV 1,731 Critical 42,394 All stats

Filters: Vendor: Python Product: Setuptools Clear all

Page 1

CVE-2026-59890 MEDIUM

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

CVSS 6.1 EPSS 0.40% Jul 8, 2026

CVE-2025-47273 HIGH

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

CVSS 7.7 EPSS 1.54% May 17, 2025

CVE-2024-6345 HIGH

Remote Code Execution in pypa/setuptools

CVSS 7.5 EPSS 1.94% Jul 15, 2024

CVE-2022-40897 HIGH

pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

CVSS 8.7 EPSS 2.62% Dec 22, 2022

CVE-2013-1633 HIGH

python-setuptools: easy_install insecure installation mechanism

CVSS 8.3 EPSS 1.97% Aug 6, 2013

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-59890	setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+	MEDIUM	6.1	0.40%		Jul 8, 2026
CVE-2025-47273	setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write	HIGH	7.7	1.54%		May 17, 2025
CVE-2024-6345	Remote Code Execution in pypa/setuptools	HIGH	7.5	1.94%		Jul 15, 2024
CVE-2022-40897	pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py	HIGH	8.7	2.62%		Dec 22, 2022
CVE-2013-1633	python-setuptools: easy_install insecure installation mechanism	HIGH	8.3	1.97%		Aug 6, 2013

Rows per page

Showing 1 to 5 CVEs · page 1