Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-setuptoolsUpgrade python39-rpm-macrosUpgrade python39-setuptools-wheelUpgrade python2-docutilsUpgrade python2-sqlalchemyUpgrade python39-urllib3Upgrade python2-psycopg2-debugUpgrade python39-cffiUpgrade python39-cryptographyUpgrade python39-pybind11-develUpgrade python2-develUpgrade python39-libsUpgrade python39-pyparsingUpgrade python2-funcsigsUpgrade python-sqlalchemy-docUpgrade python39-pluggyUpgrade python39-develUpgrade python2-bsonUpgrade python2-pytestUpgrade python2-setuptoolsUpgrade python39-pybind11Upgrade python39-iniconfigUpgrade python2-libsUpgrade python2-toolsUpgrade python2-psycopg2Upgrade python2-pyyamlUpgrade platform-python-setuptoolsUpgrade python39Upgrade python39-tomlUpgrade python2-coverageUpgrade python2-pytest-mockUpgrade python39-requestsUpgrade python39-tkinterUpgrade python2-mockUpgrade python2-virtualenvUpgrade python2-dnsUpgrade python39-testUpgrade python39-pipUpgrade python3-setuptools-wheelUpgrade python2-psycopg2-testsUpgrade python2-PyMySQLUpgrade python39-pyUpgrade python2-numpy-docUpgrade python2-setuptools_scmUpgrade python39-PyMySQLUpgrade python2-testUpgrade python2-tkinterUpgrade python39-pytestUpgrade python2-scipyUpgrade python2-attrsUpgrade python39-plyUpgrade babelUpgrade python39-pycparserUpgrade python2-requestsUpgrade python39-sixUpgrade python2-wheelUpgrade python2-ipaddressUpgrade python2-docsUpgrade python39-psycopg2-testsUpgrade python39-numpy-f2pyUpgrade python2-CythonUpgrade python39-more-itertoolsUpgrade python2-debugUpgrade python39-idnaUpgrade python39-pyyamlUpgrade python2-noseUpgrade python39-wheelUpgrade python39-pysocksUpgrade python2-rpm-macrosUpgrade python39-idleUpgrade python39-lxmlUpgrade python2-numpy-f2pyUpgrade python2-jinja2Upgrade python2-babelUpgrade python3-setuptoolsUpgrade python39-CythonUpgrade python2-docs-infoUpgrade python2-urllib3Upgrade python39-mod_wsgiUpgrade python39-pip-wheelUpgrade python2-numpyUpgrade python2-idnaUpgrade python2-pipUpgrade python2-markupsafeUpgrade python2-lxmlUpgrade python2-sixUpgrade python2-wheel-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python39-psycopg2Upgrade python2-backportsUpgrade python2-pip-wheelUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python39-attrsUpgrade python2-pluggyUpgrade python-nose-docsUpgrade python2-pytzUpgrade python2-pysocksUpgrade python2-pygmentsUpgrade python39-numpy-docUpgrade python2-pyUpgrade python39-debugUpgrade python39-wheel-wheelUpgrade python39-psycopg2-docUpgrade python39-packagingUpgrade python2Upgrade python2-chardetUpgrade python-psycopg2-docUpgrade python39-numpyUpgrade python2-setuptools-wheelUpgrade python39-chardetUpgrade python39-psutilUpgrade python39-wcwidthUpgrade python39-scipy | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-setuptoolsUpgrade python-setuptools-wheelUpgrade python38-setuptoolsUpgrade python2-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptools-wheelUpgrade platform-python-setuptoolsUpgrade python3-setuptools | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py39-setuptoolsUpgrade py39-setuptools58Upgrade py27-setuptools44 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-setuptools-wheelUpgrade python3-setuptoolsUpgrade python2-setuptools | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python2-numpy-f2pyUpgrade python2-psycopg2-testsUpgrade python2-pyyamlUpgrade python2-backports-ssl_match_hostnameUpgrade python39-chardetUpgrade python39-plyUpgrade python39-pipUpgrade python39-CythonUpgrade python39-lxmlUpgrade python39-scipyUpgrade python39-mod_wsgiUpgrade python39-pyyamlUpgrade python-sqlalchemy-docUpgrade python39-numpy-f2pyUpgrade python39-cryptographyUpgrade python2-mockUpgrade python39-numpyUpgrade python2-wheelUpgrade python2-sixUpgrade python39-rpm-macrosUpgrade python-psycopg2-docUpgrade python39-pytestUpgrade python2-dnsUpgrade python2-pymongoUpgrade python39-setuptools-wheelUpgrade python2-tkinterUpgrade python2-pytestUpgrade python2-debugUpgrade python39-pyparsingUpgrade python39-tkinterUpgrade python39-tomlUpgrade python2-noseUpgrade python2-pygmentsUpgrade python2-requestsUpgrade python2-urllib3Upgrade python39-idnaUpgrade python39-pycparserUpgrade python39-setuptoolsUpgrade python2-wheel-wheelUpgrade python39-pysocksUpgrade python2-lxmlUpgrade python2-psycopg2Upgrade python39-sixUpgrade python2-bsonUpgrade python39-pyUpgrade python39-urllib3Upgrade python39-iniconfigUpgrade python2-docsUpgrade python2-rpm-macrosUpgrade python39-pybind11-develUpgrade python2-pipUpgrade python2-markupsafeUpgrade python2-docutilsUpgrade python39-psycopg2Upgrade python2-virtualenvUpgrade python39-more-itertoolsUpgrade python39-idleUpgrade python2-pytzUpgrade python2-pytest-mockUpgrade python2Upgrade python39-psutilUpgrade python2-attrsUpgrade platform-python-setuptoolsUpgrade python39-pip-wheelUpgrade python2-testUpgrade python2-numpyUpgrade python39-wheelUpgrade python39-pybind11Upgrade python39-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-pysocksUpgrade python2-PyMySQLUpgrade python39-libsUpgrade python2-pluggyUpgrade python2-pyUpgrade python39-numpy-docUpgrade python2-idnaUpgrade python39Upgrade python3-setuptools-wheelUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python2-docs-infoUpgrade python2-develUpgrade python2-coverageUpgrade python2-babelUpgrade python39-psycopg2-testsUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python39-develUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python2-chardetUpgrade python2-backportsUpgrade python39-requestsUpgrade python39-PyMySQLUpgrade python2-psycopg2-debugUpgrade python39-wheel-wheelUpgrade python39-cffiUpgrade python2-numpy-docUpgrade python39-packagingUpgrade python2-pip-wheelUpgrade python-nose-docsUpgrade python39-testUpgrade babelUpgrade python2-setuptoolsUpgrade python39-pluggyUpgrade python2-toolsUpgrade python39-wcwidthUpgrade python39-debugUpgrade python39-attrsUpgrade python3-setuptoolsUpgrade python2-sqlalchemyUpgrade python2-jinja2 | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python2-docutilsUpgrade python2-pymongoUpgrade python39-setuptools-wheelUpgrade python2-debugUpgrade python2-coverage-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-psycopg2-testsUpgrade python-sqlalchemy-docUpgrade python39-numpy-debuginfoUpgrade python39-requestsUpgrade python2-numpy-docUpgrade python39-numpy-f2pyUpgrade python-lxml-debugsourceUpgrade python39-debugsourceUpgrade python2-jinja2Upgrade python39-urllib3Upgrade python2-babelUpgrade python2-psycopg2-debuginfoUpgrade python39-iniconfigUpgrade python39-numpyUpgrade python39-psutil-debuginfoUpgrade python39-scipyUpgrade python3-setuptools-wheelUpgrade python2-pyyamlUpgrade python2-idnaUpgrade python39Upgrade python39-packagingUpgrade python39-pip-wheelUpgrade python2-pyUpgrade python39-numpy-docUpgrade python39-testUpgrade python2-pluggyUpgrade python39-pycparserUpgrade python2-scipyUpgrade python39-cryptographyUpgrade platform-python-setuptoolsUpgrade python39-libsUpgrade python2-numpyUpgrade python-pymongo-debuginfoUpgrade python2-pytest-mockUpgrade python2-ipaddressUpgrade python2-sqlalchemyUpgrade python39-idleUpgrade python39-pybind11-develUpgrade python2-noseUpgrade Cython-debugsourceUpgrade python2-setuptoolsUpgrade python39-cryptography-debuginfoUpgrade python-nose-docsUpgrade python39-lxml-debuginfoUpgrade python2-chardetUpgrade python39-lxmlUpgrade python2-wheel-wheelUpgrade python2-pyyaml-debuginfoUpgrade python39-chardetUpgrade python2-numpy-debuginfoUpgrade python39-psycopg2-docUpgrade python2-develUpgrade python-psycopg2-debuginfoUpgrade python2-urllib3Upgrade python2-pymongo-debuginfoUpgrade python3-setuptoolsNo solution existsUpgrade python39-sixUpgrade python2-coverageUpgrade python2-scipy-debuginfoUpgrade python2-lxmlUpgrade python2-setuptools-wheelUpgrade python39-cffiUpgrade scipy-debugsourceUpgrade python2-tkinterUpgrade python39-wcwidthUpgrade python39-wheelUpgrade python2-psycopg2Upgrade python39-more-itertoolsUpgrade python-psycopg2-debugsourceUpgrade python2-bson-debuginfoUpgrade python39-pyyamlUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-requestsUpgrade python2-virtualenvUpgrade python39-psycopg2Upgrade python2-wheelUpgrade python2-attrsUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-docUpgrade python39-pluggyUpgrade python2-docs-infoUpgrade python39-rpm-macrosUpgrade python2-docsUpgrade python39-debuginfoUpgrade python2-markupsafeUpgrade python39-attrsUpgrade python39-idnaUpgrade python2-debuginfoUpgrade python2-bsonUpgrade numpy-debugsourceUpgrade python2-toolsUpgrade python2-rpm-macrosUpgrade python39-scipy-debuginfoUpgrade python2-PyMySQLUpgrade python2-dnsUpgrade python2Upgrade python2-mockUpgrade python2-Cython-debuginfoUpgrade python39-tkinterUpgrade python2-funcsigsUpgrade python39-psutilUpgrade python2-lxml-debuginfoUpgrade python39-develUpgrade python39-cffi-debuginfoUpgrade python39-CythonUpgrade python2-CythonUpgrade babelUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2-debugUpgrade python-cryptography-debugsourceUpgrade python39-pybind11Upgrade python39-wheel-wheelUpgrade python2-pytzUpgrade python39-PyMySQLUpgrade python2-pysocksUpgrade python-cffi-debugsourceUpgrade python39-tomlUpgrade python2-psycopg2-testsUpgrade python39-pipUpgrade python2-sixUpgrade python39-mod_wsgiUpgrade python2-debugsourceUpgrade python-coverage-debugsourceUpgrade python39-plyUpgrade python2-numpy-f2pyUpgrade python2-libsUpgrade python39-pyyaml-debuginfoUpgrade python2-backportsUpgrade python39-psycopg2-debuginfoUpgrade python39-pytestUpgrade python39-debugUpgrade python2-setuptools_scmUpgrade python2-pip-wheelUpgrade python39-pysocksUpgrade python2-pipUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pygmentsUpgrade PyYAML-debugsourceUpgrade python39-pyparsingUpgrade python2-pytestUpgrade python39-pyUpgrade python-psutil-debugsourceUpgrade python39-setuptoolsUpgrade python2-test | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-psutilUpgrade python2-markupsafeUpgrade python39-Cython-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2Upgrade python-coverage-debugsourceUpgrade python39-numpy-debuginfoUpgrade python-psycopg2-docUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-libsUpgrade python39-cffiUpgrade python2-sqlalchemyUpgrade PyYAML-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-scipyUpgrade python2-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-numpyUpgrade python2-CythonUpgrade numpy-debugsourceUpgrade python39-psutil-debuginfoUpgrade python39-psycopg2Upgrade python2-backportsUpgrade python-cffi-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python2-testUpgrade python39-scipy-debuginfoUpgrade python39-mod_wsgiUpgrade python2-pymongo-gridfsUpgrade python2-develUpgrade python2-psycopg2-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python2-bsonUpgrade python39-psycopg2-debuginfoUpgrade python2-coverage-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-pybind11Upgrade python2-numpy-f2pyUpgrade python2-lxml-debuginfoUpgrade python2-coverageUpgrade python39-psycopg2-testsUpgrade python39-psycopg2-docUpgrade scipy-debugsourceUpgrade python39-pyyamlUpgrade python39-cryptographyUpgrade python2-pymongoUpgrade python39-pybind11-develUpgrade python39-numpy-f2pyUpgrade python2-bson-debuginfoUpgrade python2-psycopg2-testsUpgrade python39-cffi-debuginfoUpgrade python2-toolsUpgrade python2-scipy-debuginfoUpgrade python2-pyyamlUpgrade python2-Cython-debuginfoUpgrade python-cryptography-debugsourceUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python2-debugUpgrade python-psycopg2-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python39-scipyUpgrade python2-psycopg2Upgrade python2-lxmlUpgrade python2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python39-numpyUpgrade python39-lxml-debuginfoUpgrade python2-numpy-debuginfoUpgrade python39-lxmlUpgrade python39-Cython | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.0.10 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python3-setuptoolsUpgrade python3-setuptools-wheelUpgrade python310-setuptoolsUpgrade python36-setuptoolsUpgrade python3-setuptools-testUpgrade python-setuptoolsUpgrade python39-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python-setuptoolsUpgrade python-setuptools (Ubuntu Pro)Upgrade python3-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro) | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub