setuptools vulnerabilities (Root)

5 vulnerabilities.

• setuptools Root wheel Allows Arbitrary File Permission Modification via Path Traversal CVE-2026-24049 Public exploitFix available 7.1 HighJanuary 22, 2026
• setuptools Root jaraco.context Has a Path Traversal Vulnerability CVE-2026-23949 Fix available 8.6 HighJanuary 13, 2026
• setuptools Root setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write CVE-2025-47273 Public exploitFix available 7.7 HighMay 17, 2025
• setuptools Root Remote Code Execution in pypa/setuptools CVE-2024-6345 Fix available 8.8 HighJuly 15, 2024
• setuptools Root pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) CVE-2022-40897 Fix available 5.9 MediumDecember 22, 2022