Known vulnerabilities in setuptools

Software: setuptools
Software CPE: cpe:2.3:a:pypa:setuptools:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting setuptools setuptools is affected by 5 known vulnerabilities: 2 high, 3 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137280 - Improper Handling of Unicode Encoding
CVE-2026-59890
CWE-176 Medium
No
No
83.0.0 09.07.2026 SB2026070950
SB2026080371
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273
CWE-22 High
No
No
78.1.1 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345
CWE-94 High
No
No
70.0.0 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897
CWE-185 Medium
No
No
65.5.1 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU42675 - Improper input validation
CVE-2013-1633
CWE-20 Medium
No
No
- 06.08.2013 SB2013080604
SB2013101008
SB2013081503