Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/setuptools@0.6rc4
Typepypi
Namespace
Namesetuptools
Version0.6rc4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.7
Latest_non_vulnerable_version78.1.1
Affected_by_vulnerabilities
0
url VCID-1pe7-4f4b-ukhu
vulnerability_id VCID-1pe7-4f4b-ukhu
summary setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47273.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47273.json
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml
2
reference_url https://github.com/pypa/setuptools
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/setuptools
3
reference_url https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88
4
reference_url https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b
5
reference_url https://github.com/pypa/setuptools/issues/4946
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/setuptools/issues/4946
6
reference_url https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
7
reference_url https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105970
reference_id 1105970
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105970
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2366982
reference_id 2366982
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2366982
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-47273
reference_id CVE-2025-47273
reference_type
scores
0
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-47273
11
reference_url https://github.com/advisories/GHSA-5rjg-fvgr-3xxf
reference_id GHSA-5rjg-fvgr-3xxf
reference_type
scores
url https://github.com/advisories/GHSA-5rjg-fvgr-3xxf
12
reference_url https://access.redhat.com/errata/RHSA-2025:10407
reference_id RHSA-2025:10407
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10407
13
reference_url https://access.redhat.com/errata/RHSA-2025:10787
reference_id RHSA-2025:10787
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10787
14
reference_url https://access.redhat.com/errata/RHSA-2025:10809
reference_id RHSA-2025:10809
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10809
15
reference_url https://access.redhat.com/errata/RHSA-2025:10992
reference_id RHSA-2025:10992
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:10992
16
reference_url https://access.redhat.com/errata/RHSA-2025:11036
reference_id RHSA-2025:11036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11036
17
reference_url https://access.redhat.com/errata/RHSA-2025:11043
reference_id RHSA-2025:11043
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11043
18
reference_url https://access.redhat.com/errata/RHSA-2025:11044
reference_id RHSA-2025:11044
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11044
19
reference_url https://access.redhat.com/errata/RHSA-2025:11101
reference_id RHSA-2025:11101
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11101
20
reference_url https://access.redhat.com/errata/RHSA-2025:11102
reference_id RHSA-2025:11102
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11102
21
reference_url https://access.redhat.com/errata/RHSA-2025:11146
reference_id RHSA-2025:11146
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11146
22
reference_url https://access.redhat.com/errata/RHSA-2025:11388
reference_id RHSA-2025:11388
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11388
23
reference_url https://access.redhat.com/errata/RHSA-2025:11424
reference_id RHSA-2025:11424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11424
24
reference_url https://access.redhat.com/errata/RHSA-2025:11425
reference_id RHSA-2025:11425
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11425
25
reference_url https://access.redhat.com/errata/RHSA-2025:11426
reference_id RHSA-2025:11426
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11426
26
reference_url https://access.redhat.com/errata/RHSA-2025:11427
reference_id RHSA-2025:11427
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11427
27
reference_url https://access.redhat.com/errata/RHSA-2025:11463
reference_id RHSA-2025:11463
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11463
28
reference_url https://access.redhat.com/errata/RHSA-2025:11464
reference_id RHSA-2025:11464
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11464
29
reference_url https://access.redhat.com/errata/RHSA-2025:11584
reference_id RHSA-2025:11584
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11584
30
reference_url https://access.redhat.com/errata/RHSA-2025:11607
reference_id RHSA-2025:11607
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11607
31
reference_url https://access.redhat.com/errata/RHSA-2025:11868
reference_id RHSA-2025:11868
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11868
32
reference_url https://access.redhat.com/errata/RHSA-2025:11984
reference_id RHSA-2025:11984
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:11984
33
reference_url https://access.redhat.com/errata/RHSA-2025:12020
reference_id RHSA-2025:12020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:12020
34
reference_url https://access.redhat.com/errata/RHSA-2025:12834
reference_id RHSA-2025:12834
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:12834
35
reference_url https://access.redhat.com/errata/RHSA-2025:13578
reference_id RHSA-2025:13578
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13578
36
reference_url https://access.redhat.com/errata/RHSA-2025:13668
reference_id RHSA-2025:13668
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13668
37
reference_url https://access.redhat.com/errata/RHSA-2025:13669
reference_id RHSA-2025:13669
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13669
38
reference_url https://access.redhat.com/errata/RHSA-2025:13803
reference_id RHSA-2025:13803
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13803
39
reference_url https://access.redhat.com/errata/RHSA-2025:13804
reference_id RHSA-2025:13804
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13804
40
reference_url https://access.redhat.com/errata/RHSA-2025:14686
reference_id RHSA-2025:14686
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14686
41
reference_url https://access.redhat.com/errata/RHSA-2025:14900
reference_id RHSA-2025:14900
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14900
42
reference_url https://access.redhat.com/errata/RHSA-2025:15408
reference_id RHSA-2025:15408
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15408
43
reference_url https://access.redhat.com/errata/RHSA-2025:15410
reference_id RHSA-2025:15410
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15410
44
reference_url https://access.redhat.com/errata/RHSA-2025:15411
reference_id RHSA-2025:15411
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15411
45
reference_url https://access.redhat.com/errata/RHSA-2025:19421
reference_id RHSA-2025:19421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19421
46
reference_url https://access.redhat.com/errata/RHSA-2025:19422
reference_id RHSA-2025:19422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19422
47
reference_url https://access.redhat.com/errata/RHSA-2025:19423
reference_id RHSA-2025:19423
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19423
48
reference_url https://access.redhat.com/errata/RHSA-2025:19424
reference_id RHSA-2025:19424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19424
49
reference_url https://access.redhat.com/errata/RHSA-2025:19425
reference_id RHSA-2025:19425
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19425
50
reference_url https://access.redhat.com/errata/RHSA-2025:19426
reference_id RHSA-2025:19426
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19426
51
reference_url https://access.redhat.com/errata/RHSA-2025:19427
reference_id RHSA-2025:19427
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19427
52
reference_url https://access.redhat.com/errata/RHSA-2025:19428
reference_id RHSA-2025:19428
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19428
53
reference_url https://access.redhat.com/errata/RHSA-2025:19429
reference_id RHSA-2025:19429
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19429
54
reference_url https://access.redhat.com/errata/RHSA-2025:19430
reference_id RHSA-2025:19430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:19430
55
reference_url https://access.redhat.com/errata/RHSA-2025:9940
reference_id RHSA-2025:9940
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:9940
56
reference_url https://access.redhat.com/errata/RHSA-2025:9966
reference_id RHSA-2025:9966
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:9966
57
reference_url https://access.redhat.com/errata/RHSA-2026:4215
reference_id RHSA-2026:4215
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:4215
fixed_packages
0
url pkg:pypi/setuptools@78.1.1
purl pkg:pypi/setuptools@78.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/setuptools@78.1.1
aliases CVE-2025-47273, GHSA-5rjg-fvgr-3xxf, PYSEC-2025-49
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1pe7-4f4b-ukhu
1
url VCID-f4x2-qsqp-kfcn
vulnerability_id VCID-f4x2-qsqp-kfcn
summary Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-40897.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-40897.json
1
reference_url https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200
reference_id
reference_type
scores
url https://github.com/pypa/setuptools/blob/fe8a98e696241487ba6ac9f91faa38ade939ec5d/setuptools/package_index.py#L200
2
reference_url https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
reference_id
reference_type
scores
url https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be
3
reference_url https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1
reference_id
reference_type
scores
url https://github.com/pypa/setuptools/compare/v65.5.0...v65.5.1
4
reference_url https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
reference_id
reference_type
scores
url https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
5
reference_url https://pyup.io/vulnerabilities/CVE-2022-40897/52495/
reference_id
reference_type
scores
url https://pyup.io/vulnerabilities/CVE-2022-40897/52495/
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2158559
reference_id 2158559
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2158559
7
reference_url https://access.redhat.com/errata/RHSA-2023:0835
reference_id RHSA-2023:0835
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0835
8
reference_url https://access.redhat.com/errata/RHSA-2023:0952
reference_id RHSA-2023:0952
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0952
9
reference_url https://access.redhat.com/errata/RHSA-2023:6793
reference_id RHSA-2023:6793
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6793
10
reference_url https://access.redhat.com/errata/RHSA-2023:7395
reference_id RHSA-2023:7395
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7395
11
reference_url https://access.redhat.com/errata/RHSA-2024:2985
reference_id RHSA-2024:2985
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2985
12
reference_url https://access.redhat.com/errata/RHSA-2024:2987
reference_id RHSA-2024:2987
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:2987
13
reference_url https://access.redhat.com/errata/RHSA-2024:4421
reference_id RHSA-2024:4421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:4421
14
reference_url https://access.redhat.com/errata/RHSA-2024:6915
reference_id RHSA-2024:6915
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:6915
fixed_packages
0
url pkg:pypi/setuptools@65.5.1
purl pkg:pypi/setuptools@65.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1pe7-4f4b-ukhu
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/setuptools@65.5.1
aliases CVE-2022-40897, PYSEC-2022-43012
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f4x2-qsqp-kfcn
2
url VCID-s5g1-3fpd-akd6
vulnerability_id VCID-s5g1-3fpd-akd6
summary easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.
references
0
reference_url https://pypi.python.org/pypi/setuptools/0.9.8#changes
reference_id
reference_type
scores
url https://pypi.python.org/pypi/setuptools/0.9.8#changes
1
reference_url http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
reference_id
reference_type
scores
url http://www.reddit.com/r/Python/comments/17rfh7/warning_dont_use_pip_in_an_untrusted_network_a/
fixed_packages
0
url pkg:pypi/setuptools@0.7
purl pkg:pypi/setuptools@0.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/setuptools@0.7
aliases CVE-2013-1633, GHSA-27x4-j476-jp5f, PYSEC-2013-22
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s5g1-3fpd-akd6
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/setuptools@0.6rc4