Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-pytzUpgrade python2-setuptools-wheelUpgrade python39-debugUpgrade python2-sixUpgrade python-psycopg2-docUpgrade python39-packagingUpgrade python2-markupsafeUpgrade python2-lxmlUpgrade python2-docs-infoUpgrade python39-attrsUpgrade python2-pyUpgrade python2-idnaUpgrade python39-psycopg2-docUpgrade python39-wheel-wheelUpgrade python-nose-docsUpgrade python2-chardetUpgrade python2-backportsUpgrade python39-CythonUpgrade python39-idleUpgrade python39-mod_wsgiUpgrade python39-chardetUpgrade python2-urllib3Upgrade python2-jinja2Upgrade python2-pipUpgrade python2-babelUpgrade python2-pip-wheelUpgrade python39-pip-wheelUpgrade python2-wheel-wheelUpgrade python3-setuptoolsUpgrade python2-numpy-f2pyUpgrade python2-pymongoUpgrade python2-pysocksUpgrade python39-numpy-docUpgrade python2-pygmentsUpgrade python39-numpyUpgrade python2-backports-ssl_match_hostnameUpgrade python39-psutilUpgrade python2-numpyUpgrade python39-wcwidthUpgrade python2-pymongo-gridfsUpgrade python39-scipyUpgrade python39-lxmlUpgrade python2Upgrade python39-psycopg2Upgrade python2-pluggyUpgrade python39-psycopg2-testsUpgrade python39-idnaUpgrade python2-setuptoolsUpgrade python2-setuptools_scmUpgrade python2-bsonUpgrade python2-pytest-mockUpgrade python2-pyyamlUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python2-noseUpgrade python2-psycopg2Upgrade python39-setuptoolsUpgrade python39-requestsUpgrade python39-pyparsingUpgrade python2-psycopg2-debugUpgrade python2-develUpgrade python39-develUpgrade python2-requestsUpgrade python39-sixUpgrade python39-numpy-f2pyUpgrade python39-more-itertoolsUpgrade python39-testUpgrade python2-numpy-docUpgrade platform-python-setuptoolsUpgrade python39Upgrade python2-PyMySQLUpgrade python3-setuptools-wheelUpgrade python2-docutilsUpgrade python39-pybind11-develUpgrade python39-pysocksUpgrade babelUpgrade python2-wheelUpgrade python2-libsUpgrade python2-pytestUpgrade python39-urllib3Upgrade python2-tkinterUpgrade python39-rpm-macrosUpgrade python39-pytestUpgrade python2-debugUpgrade python2-attrsUpgrade python2-toolsUpgrade python2-rpm-macrosUpgrade python39-wheelUpgrade python2-scipyUpgrade python39-tomlUpgrade python39-cryptographyUpgrade python2-psycopg2-testsUpgrade python2-dnsUpgrade python39-cffiUpgrade python39-pipUpgrade python39-plyUpgrade python2-coverageUpgrade python39-libsUpgrade python39-pybind11Upgrade python39-tkinterUpgrade python39-pluggyUpgrade python39-setuptools-wheelUpgrade python39-iniconfigUpgrade python39-pyyamlUpgrade python39-PyMySQLUpgrade python2-virtualenvUpgrade python2-testUpgrade python2-docsUpgrade python-sqlalchemy-docUpgrade python39-pyUpgrade python39-pycparserUpgrade python2-ipaddressUpgrade python2-mockUpgrade python2-sqlalchemy | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python2-setuptoolsUpgrade python-setuptools-wheelUpgrade python38-setuptoolsUpgrade python3-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptoolsUpgrade platform-python-setuptoolsUpgrade python3-setuptools-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py39-setuptoolsUpgrade py39-setuptools58Upgrade py27-setuptools44 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-setuptools-wheelUpgrade python3-setuptoolsUpgrade python2-setuptools | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python39-tkinterUpgrade python2-debugUpgrade python2-markupsafeUpgrade python2-mockUpgrade python39-iniconfigUpgrade python2-pytestUpgrade python-sqlalchemy-docUpgrade python2-pipUpgrade python2-wheel-wheelUpgrade python2-urllib3Upgrade python39-idnaUpgrade python2-rpm-macrosUpgrade python39-pybind11-develUpgrade python39-pycparserUpgrade python2-noseUpgrade python2-pygmentsUpgrade python39-setuptoolsUpgrade python2-tkinterUpgrade python39-pyparsingUpgrade python39-cryptographyUpgrade python-psycopg2-docUpgrade python39-tomlUpgrade python2-dnsUpgrade python2-requestsUpgrade python2-lxmlUpgrade python2-numpy-f2pyUpgrade python39-pyyamlUpgrade python2-psycopg2-testsUpgrade python39-numpyUpgrade python2-wheelUpgrade python39-pyUpgrade python39-CythonUpgrade python39-chardetUpgrade python2-psycopg2Upgrade python39-setuptools-wheelUpgrade python2-bsonUpgrade python39-pysocksUpgrade python39-pytestUpgrade python39-sixUpgrade python39-pipUpgrade python2-pyyamlUpgrade python39-plyUpgrade python2-docsUpgrade python39-scipyUpgrade python2-backports-ssl_match_hostnameUpgrade python39-urllib3Upgrade python39-numpy-f2pyUpgrade python39-rpm-macrosUpgrade python2-sixUpgrade python39-lxmlUpgrade python39-mod_wsgiUpgrade python2-pymongoUpgrade python2-pyUpgrade python-nose-docsUpgrade python39-psutilUpgrade python39-wheel-wheelUpgrade python2-numpy-docUpgrade python2-idnaUpgrade python2-numpyUpgrade python39-pluggyUpgrade python39-cffiUpgrade python2-setuptoolsUpgrade python2-testUpgrade python2-virtualenvUpgrade python39-pybind11Upgrade python39-psycopg2-docUpgrade python39-libsUpgrade python2-setuptools-wheelUpgrade python2-PyMySQLUpgrade python2-pluggyUpgrade python2-docutilsUpgrade python39-psycopg2Upgrade python2-pysocksUpgrade python39-wheelUpgrade python2-psycopg2-debugUpgrade python2-pip-wheelUpgrade python39-packagingUpgrade python39-wcwidthUpgrade python39-debugUpgrade python39-attrsUpgrade python3-setuptoolsUpgrade python2-sqlalchemyUpgrade python2-jinja2Upgrade python2-attrsUpgrade platform-python-setuptoolsUpgrade python39-develUpgrade python2-backportsUpgrade python39-requestsUpgrade python39-PyMySQLUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python2-chardetUpgrade python2-coverageUpgrade python3-setuptools-wheelUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python2-docs-infoUpgrade python2-develUpgrade python2-babelUpgrade python39-psycopg2-testsUpgrade python39-numpy-docUpgrade python39Upgrade babelUpgrade python2Upgrade python39-pip-wheelUpgrade python39-more-itertoolsUpgrade python39-idleUpgrade python2-pytzUpgrade python2-pytest-mockUpgrade python39-testUpgrade python2-tools | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python39-more-itertoolsUpgrade python39-wcwidthUpgrade python39-wheelUpgrade python2-pyyaml-debuginfoUpgrade python39-debugsourceUpgrade python39-sixUpgrade python2-chardetUpgrade python-psycopg2-debugsourceUpgrade python39-lxmlUpgrade python39-Cython-debuginfoUpgrade python2-setuptoolsUpgrade python39-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python39-pybind11-develUpgrade python39-cffiUpgrade Cython-debugsourceUpgrade python2-jinja2Upgrade python39-pyyamlUpgrade python39-numpy-f2pyUpgrade python-nose-docsUpgrade python2-bson-debuginfoNo solution existsUpgrade python39-cryptography-debuginfoUpgrade python2-pytest-mockUpgrade python39-idleUpgrade python2-pluggyUpgrade python39-testUpgrade python2-pymongo-debuginfoUpgrade python2-idnaUpgrade python2-develUpgrade python2-numpy-docUpgrade python-psycopg2-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-numpyUpgrade python39-psycopg2-docUpgrade python39-pip-wheelUpgrade python39-libsUpgrade python2-coverage-debuginfoUpgrade python2-debugUpgrade python-pymongo-debuginfoUpgrade python2-pymongoUpgrade python2-pyyamlUpgrade python2-babelUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2Upgrade python39-psutil-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-docutilsUpgrade python39-cryptographyUpgrade python2-urllib3Upgrade python39Upgrade python39-numpyUpgrade python39-requestsUpgrade python-sqlalchemy-docUpgrade python2-sqlalchemyUpgrade python2-ipaddressUpgrade python39-urllib3Upgrade python39-numpy-docUpgrade python-lxml-debugsourceUpgrade python2-pyUpgrade python39-scipyUpgrade python3-setuptools-wheelUpgrade python2-noseUpgrade python39-numpy-debuginfoUpgrade python39-setuptools-wheelUpgrade python2-scipyUpgrade python2-setuptools-wheelUpgrade python2-tkinterUpgrade platform-python-setuptoolsUpgrade python39-pycparserUpgrade python39-packagingUpgrade python39-psycopg2-testsUpgrade python2-lxmlUpgrade python2-coverageUpgrade python3-setuptoolsUpgrade python2-wheel-wheelUpgrade python39-iniconfigUpgrade python39-chardetUpgrade python2-dnsUpgrade python39-psutilUpgrade python2-funcsigsUpgrade python2-requestsUpgrade python39-idnaUpgrade python2-backportsUpgrade python39-pipUpgrade python2-markupsafeUpgrade python2-rpm-macrosUpgrade python2-toolsUpgrade python39-pluggyUpgrade python2-attrsUpgrade python2-virtualenvUpgrade python39-rpm-macrosUpgrade python-pymongo-debugsourceUpgrade python2-docs-infoUpgrade python-psycopg2-docUpgrade python2-testUpgrade python39-psycopg2Upgrade python2-wheelUpgrade python-psutil-debugsourceUpgrade python2-pygmentsUpgrade python2-backports-ssl_match_hostnameUpgrade python39-attrsUpgrade python2Upgrade python2-pip-wheelUpgrade python2-docsUpgrade python2-sixUpgrade python2-CythonUpgrade python2-lxml-debuginfoUpgrade python2-setuptools_scmUpgrade babelUpgrade python39-pyyaml-debuginfoUpgrade python39-mod_wsgiUpgrade python39-psycopg2-debuginfoUpgrade python2-pysocksUpgrade python39-plyUpgrade python39-pysocksUpgrade python39-PyMySQLUpgrade python2-pytzUpgrade python2-psycopg2-testsUpgrade python-cffi-debugsourceUpgrade python39-pybind11Upgrade python39-wheel-wheelUpgrade python-cryptography-debugsourceUpgrade python39-develUpgrade python2-libsUpgrade python39-tkinterUpgrade python2-Cython-debuginfoUpgrade python2-mockUpgrade python39-debuginfoUpgrade python39-debugUpgrade python39-pytestUpgrade python2-PyMySQLUpgrade python-coverage-debugsourceUpgrade python2-numpy-f2pyUpgrade python2-debugsourceUpgrade python2-pipUpgrade numpy-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-bsonUpgrade python2-pytestUpgrade python39-pyparsingUpgrade python2-psycopg2-debugUpgrade python2-psycopg2-debug-debuginfoUpgrade python39-setuptoolsUpgrade python39-scipy-debuginfoUpgrade python2-debuginfoUpgrade python39-pyUpgrade python39-tomlUpgrade python39-CythonUpgrade python2-pymongo-gridfsUpgrade python39-cffi-debuginfo | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-pyyaml-debuginfoUpgrade python2-testUpgrade python2-psycopg2-debuginfoUpgrade python39-numpy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python39-psycopg2-debuginfoUpgrade python2-develUpgrade python-coverage-debugsourceUpgrade python2-psycopg2-debugUpgrade python39-psutil-debuginfoUpgrade python39-psycopg2Upgrade python39-mod_wsgiUpgrade python-psycopg2-docUpgrade python2-bsonUpgrade python2-CythonUpgrade python39-scipy-debuginfoUpgrade numpy-debugsourceUpgrade python2-numpyUpgrade python39-psutilUpgrade python39-cffiUpgrade python2-sqlalchemyUpgrade python2-backportsUpgrade python-cffi-debugsourceUpgrade python2-markupsafeUpgrade python2-libsUpgrade python2-psycopg2-debug-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2Upgrade python39-cryptography-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python39-Cython-debuginfoUpgrade python2-coverage-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-scipyUpgrade python39-numpy-f2pyUpgrade python2-pyyamlUpgrade python39-cryptographyUpgrade python39-scipyUpgrade scipy-debugsourceUpgrade python2-numpy-f2pyUpgrade python2-lxml-debuginfoUpgrade python2-coverageUpgrade python2-bson-debuginfoUpgrade python39-pybind11-develUpgrade python2-psycopg2Upgrade python2-pymongoUpgrade python-lxml-debugsourceUpgrade python39-pybind11Upgrade python2-lxmlUpgrade python39-cffi-debuginfoUpgrade python2-psycopg2-testsUpgrade Cython-debugsourceUpgrade python2-toolsUpgrade python2-scipy-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39-lxmlUpgrade python2-numpy-debuginfoUpgrade python39-CythonUpgrade python-pymongo-debuginfoUpgrade python2-debugsourceUpgrade python39-numpyUpgrade python2-debugUpgrade python-psycopg2-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-tkinterUpgrade python2-Cython-debuginfoUpgrade python39-psycopg2-docUpgrade python-cryptography-debugsourceUpgrade python39-pyyamlUpgrade python39-psycopg2-tests | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.2.2 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python310-setuptoolsUpgrade python39-setuptoolsUpgrade python36-setuptoolsUpgrade python3-setuptools-testUpgrade python3-setuptools-wheelUpgrade python-setuptoolsUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python3-setuptoolsUpgrade python-setuptools (Ubuntu Pro)Upgrade python-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro) | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub