Skip to content

pypa setuptools

CVE-2026-59890 Medium 6.1 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ 0.4%
CVE-2025-47273 High 7.7 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write 1.6%