{"url":"http://public2.vulnerablecode.io/api/packages/90504?format=json","purl":"pkg:rpm/redhat/fence-agents@4.10.0-62.el9_4?arch=15","type":"rpm","namespace":"redhat","name":"fence-agents","version":"4.10.0-62.el9_4","qualifiers":{"arch":"15"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15026?format=json","vulnerability_id":"VCID-uqed-9p12-7bdx","summary":"setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47273.json","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47273.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-47273","reference_id":"","reference_type":"","scores":[{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65444","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65464","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65467","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65374","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65405","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65433","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65447","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65428","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65417","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65364","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.654","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65455","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65438","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65453","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00487","scoring_system":"epss","scoring_elements":"0.65442","published_at":"2026-04-16T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-47273"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml"},{"reference_url":"https://github.com/pypa/setuptools","reference_id":"","reference_type":"","scores":[{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/setuptools"},{"reference_url":"https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-19T14:45:34Z/"}],"url":"https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88"},{"reference_url":"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-19T14:45:34Z/"}],"url":"https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b"},{"reference_url":"https://github.com/pypa/setuptools/issues/4946","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-19T14:45:34Z/"}],"url":"https://github.com/pypa/setuptools/issues/4946"},{"reference_url":"https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-19T14:45:34Z/"}],"url":"https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47273","reference_id":"","reference_type":"","scores":[{"value":"7.7","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47273"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105970","reference_id":"1105970","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105970"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366982","reference_id":"2366982","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366982"},{"reference_url":"https://github.com/advisories/GHSA-5rjg-fvgr-3xxf","reference_id":"GHSA-5rjg-fvgr-3xxf","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5rjg-fvgr-3xxf"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10407","reference_id":"RHSA-2025:10407","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10407"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10787","reference_id":"RHSA-2025:10787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10809","reference_id":"RHSA-2025:10809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:10992","reference_id":"RHSA-2025:10992","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:10992"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11036","reference_id":"RHSA-2025:11036","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11036"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11043","reference_id":"RHSA-2025:11043","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11043"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11044","reference_id":"RHSA-2025:11044","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11044"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11101","reference_id":"RHSA-2025:11101","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11101"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11102","reference_id":"RHSA-2025:11102","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11102"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11146","reference_id":"RHSA-2025:11146","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11146"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11388","reference_id":"RHSA-2025:11388","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11388"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11424","reference_id":"RHSA-2025:11424","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11424"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11425","reference_id":"RHSA-2025:11425","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11426","reference_id":"RHSA-2025:11426","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11426"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11427","reference_id":"RHSA-2025:11427","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11427"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11463","reference_id":"RHSA-2025:11463","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11463"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11464","reference_id":"RHSA-2025:11464","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11464"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11584","reference_id":"RHSA-2025:11584","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11584"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11607","reference_id":"RHSA-2025:11607","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11607"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11868","reference_id":"RHSA-2025:11868","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11868"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:11984","reference_id":"RHSA-2025:11984","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:11984"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12020","reference_id":"RHSA-2025:12020","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:12020"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:12834","reference_id":"RHSA-2025:12834","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:12834"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13578","reference_id":"RHSA-2025:13578","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:13578"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13668","reference_id":"RHSA-2025:13668","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:13668"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13669","reference_id":"RHSA-2025:13669","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:13669"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13803","reference_id":"RHSA-2025:13803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:13803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:13804","reference_id":"RHSA-2025:13804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:13804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:14686","reference_id":"RHSA-2025:14686","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:14686"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:14900","reference_id":"RHSA-2025:14900","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:14900"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:15408","reference_id":"RHSA-2025:15408","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:15408"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:15410","reference_id":"RHSA-2025:15410","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:15410"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:15411","reference_id":"RHSA-2025:15411","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:15411"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19421","reference_id":"RHSA-2025:19421","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19421"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19422","reference_id":"RHSA-2025:19422","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19422"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19423","reference_id":"RHSA-2025:19423","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19423"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19424","reference_id":"RHSA-2025:19424","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19424"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19425","reference_id":"RHSA-2025:19425","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19426","reference_id":"RHSA-2025:19426","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19426"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19427","reference_id":"RHSA-2025:19427","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19427"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19428","reference_id":"RHSA-2025:19428","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19428"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19429","reference_id":"RHSA-2025:19429","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19429"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:19430","reference_id":"RHSA-2025:19430","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:19430"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:9940","reference_id":"RHSA-2025:9940","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:9940"},{"reference_url":"https://access.redhat.com/errata/RHSA-2025:9966","reference_id":"RHSA-2025:9966","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2025:9966"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:4215","reference_id":"RHSA-2026:4215","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:4215"},{"reference_url":"https://usn.ubuntu.com/7544-1/","reference_id":"USN-7544-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7544-1/"},{"reference_url":"https://usn.ubuntu.com/8010-1/","reference_id":"USN-8010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8010-1/"}],"fixed_packages":[],"aliases":["BIT-setuptools-2025-47273","CVE-2025-47273","GHSA-5rjg-fvgr-3xxf","PYSEC-2025-49"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uqed-9p12-7bdx"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.10.0-62.el9_4%3Farch=15"}