Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-lxmlUpgrade python2-setuptools-wheelUpgrade python2-sixUpgrade python2-idnaUpgrade python2Upgrade python39-pip-wheelUpgrade python39-psycopg2-docUpgrade python2-urllib3Upgrade python39-packagingUpgrade python2-docs-infoUpgrade python39-wheel-wheelUpgrade python2-babelUpgrade python39-debugUpgrade python2-pysocksUpgrade python2-pip-wheelUpgrade python2-jinja2Upgrade python2-pymongoUpgrade python39-numpyUpgrade python2-pygmentsUpgrade python2-markupsafeUpgrade python39-chardetUpgrade python39-idleUpgrade python2-pipUpgrade python39-mod_wsgiUpgrade python39-CythonUpgrade python2-wheel-wheelUpgrade python-nose-docsUpgrade python2-chardetUpgrade python39-numpy-docUpgrade python2-pluggyUpgrade python3-setuptoolsUpgrade python2-backportsUpgrade python39-scipyUpgrade python-psycopg2-docUpgrade python39-psutilUpgrade python2-numpyUpgrade python2-pymongo-gridfsUpgrade python39-psycopg2Upgrade python2-pyUpgrade python2-numpy-f2pyUpgrade python2-pytzUpgrade python2-backports-ssl_match_hostnameUpgrade python39-lxmlUpgrade python39-attrsUpgrade python39-wcwidthUpgrade python39-setuptools-wheelUpgrade babelUpgrade python39-pycparserUpgrade python39-pyUpgrade python39-psycopg2-testsUpgrade python39-numpy-f2pyUpgrade python39-develUpgrade python2-mockUpgrade python-sqlalchemy-docUpgrade python39-plyUpgrade python39-setuptoolsUpgrade python2-psycopg2-debugUpgrade python2-PyMySQLUpgrade python2-numpy-docUpgrade python2-noseUpgrade python2-develUpgrade python2-requestsUpgrade python39-sixUpgrade platform-python-setuptoolsUpgrade python2-scipyUpgrade python2-psycopg2-testsUpgrade python39-urllib3Upgrade python2-pyyamlUpgrade python39-pybind11-develUpgrade python2-psycopg2Upgrade python2-pytest-mockUpgrade python3-setuptools-wheelUpgrade python2-bsonUpgrade python39Upgrade python2-setuptoolsUpgrade python39-wheelUpgrade python39-requestsUpgrade python39-cffiUpgrade python2-docutilsUpgrade python39-pyparsingUpgrade python2-rpm-macrosUpgrade python2-wheelUpgrade python2-docsUpgrade python39-PyMySQLUpgrade python2-libsUpgrade python2-setuptools_scmUpgrade python2-testUpgrade python2-tkinterUpgrade python39-more-itertoolsUpgrade python39-idnaUpgrade python39-pluggyUpgrade python2-CythonUpgrade python2-dnsUpgrade python39-testUpgrade python39-pytestUpgrade python2-virtualenvUpgrade python39-tkinterUpgrade python39-pybind11Upgrade python2-pytestUpgrade python39-pyyamlUpgrade python39-rpm-macrosUpgrade python39-iniconfigUpgrade python39-pysocksUpgrade python39-libsUpgrade python2-toolsUpgrade python2-sqlalchemyUpgrade python39-cryptographyUpgrade python2-attrsUpgrade python2-debugUpgrade python39-tomlUpgrade python2-funcsigsUpgrade python39-pipUpgrade python2-coverageUpgrade python2-ipaddress | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python2-setuptoolsUpgrade python38-setuptoolsUpgrade python-setuptools-wheelUpgrade python3-setuptools | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade python3-setuptools-wheelUpgrade python3-setuptoolsUpgrade platform-python-setuptools | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py39-setuptoolsUpgrade py39-setuptools58Upgrade py27-setuptools44 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-setuptoolsUpgrade python-setuptools-wheelUpgrade python3-setuptools | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python39-numpyUpgrade python39-mod_wsgiUpgrade python39-pysocksUpgrade python39-lxmlUpgrade python39-pytestUpgrade python2-wheelUpgrade python-sqlalchemy-docUpgrade python2-pymongoUpgrade python39-setuptools-wheelUpgrade python39-pipUpgrade python39-chardetUpgrade python39-numpy-f2pyUpgrade python39-pyyamlUpgrade python39-cryptographyUpgrade python39-pyUpgrade python2-mockUpgrade python39-iniconfigUpgrade python2-pipUpgrade python2-pytestUpgrade python2-wheel-wheelUpgrade python2-debugUpgrade python39-rpm-macrosUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-testsUpgrade python39-tomlUpgrade python39-CythonUpgrade python2-lxmlUpgrade python2-bsonUpgrade python2-psycopg2Upgrade python2-markupsafeUpgrade python39-sixUpgrade python39-tkinterUpgrade python2-tkinterUpgrade python39-pyparsingUpgrade python2-sixUpgrade python2-docsUpgrade python2-pyyamlUpgrade python39-idnaUpgrade python39-plyUpgrade python39-pybind11-develUpgrade python39-scipyUpgrade python2-urllib3Upgrade python39-pycparserUpgrade python39-setuptoolsUpgrade python39-urllib3Upgrade python2-rpm-macrosUpgrade python2-requestsUpgrade python2-dnsUpgrade python2-noseUpgrade python-psycopg2-docUpgrade python2-pygmentsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-virtualenvUpgrade python2-testUpgrade python39-packagingUpgrade python39-cffiUpgrade python39-numpy-docUpgrade python3-setuptools-wheelUpgrade python2-numpyUpgrade python2-toolsUpgrade python39-testUpgrade babelUpgrade python2-libsUpgrade python39-psutilUpgrade python39-pip-wheelUpgrade python39-more-itertoolsUpgrade python2-pytzUpgrade python2Upgrade python2-pytest-mockUpgrade python39-idleUpgrade python2-numpy-docUpgrade python39-debugUpgrade python39-attrsUpgrade python3-setuptoolsUpgrade python2-sqlalchemyUpgrade python2-jinja2Upgrade python39-wcwidthUpgrade platform-python-setuptoolsUpgrade python2-attrsUpgrade python39-develUpgrade python2-chardetUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python39-requestsUpgrade python39-PyMySQLUpgrade python2-CythonUpgrade python2-backportsUpgrade python2-pip-wheelUpgrade python2-psycopg2-debugUpgrade python2-pymongo-gridfsUpgrade python-nose-docsUpgrade python2-funcsigsUpgrade python39-psycopg2Upgrade python39-wheelUpgrade python39-pybind11Upgrade python39-psycopg2-docUpgrade python39-libsUpgrade python2-setuptools-wheelUpgrade python2-pysocksUpgrade python2-PyMySQLUpgrade python2-pluggyUpgrade python2-docutilsUpgrade python2-babelUpgrade python39-wheel-wheelUpgrade python39-pluggyUpgrade python2-pyUpgrade python2-idnaUpgrade python2-docs-infoUpgrade python2-develUpgrade python2-coverageUpgrade python39-psycopg2-testsUpgrade python39Upgrade python2-setuptools_scmUpgrade python2-setuptools | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python2-urllib3Upgrade python3-setuptoolsUpgrade python2-setuptools-wheelUpgrade python39-setuptools-wheelUpgrade python39-testUpgrade python-psycopg2-debuginfoUpgrade python39-iniconfigUpgrade python2-pluggyUpgrade python39-packagingUpgrade python39-psycopg2-testsUpgrade python2-pymongo-debuginfoUpgrade python39-idleUpgrade python2-pyyaml-debuginfoUpgrade python39-debugsourceUpgrade python39-lxmlUpgrade scipy-debugsourceUpgrade Cython-debugsourceUpgrade python2-pytest-mockUpgrade python2-debugUpgrade python39-numpy-docUpgrade python2-idnaUpgrade platform-python-setuptoolsUpgrade python-nose-docsUpgrade python39-pip-wheelUpgrade python2-noseUpgrade python2-babelUpgrade python39-pyyamlUpgrade python39-pybind11-develUpgrade python39-lxml-debuginfoUpgrade python39-Cython-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-chardetUpgrade python39-urllib3Upgrade python39-numpy-f2pyUpgrade python2-setuptoolsUpgrade python39-cryptographyUpgrade python39-cryptography-debuginfoUpgrade python-pymongo-debuginfoUpgrade python39-pycparserUpgrade python-lxml-debugsourceUpgrade python2-scipyUpgrade python2-pyUpgrade python2-pymongoUpgrade python39-numpyUpgrade python2-pyyamlUpgrade python39-cffiUpgrade python39-wcwidthUpgrade python2-psycopg2Upgrade python2-numpy-debuginfoUpgrade python39-libsUpgrade python2-psycopg2-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-docutilsUpgrade python2-wheel-wheelUpgrade python-sqlalchemy-docUpgrade python39-chardetUpgrade python39-psycopg2-docUpgrade python2-numpyUpgrade python2-sqlalchemyUpgrade python39-numpy-debuginfoUpgrade python3-setuptools-wheelUpgrade python39-scipyUpgrade python39-psutil-debuginfoUpgrade python2-ipaddressUpgrade python2-coverage-debuginfoNo solution existsUpgrade python39-requestsUpgrade python39-more-itertoolsUpgrade python2-lxmlUpgrade python39-wheelUpgrade python2-numpy-docUpgrade python2-bson-debuginfoUpgrade python2-jinja2Upgrade python39-sixUpgrade python39Upgrade python2-develUpgrade python2-coverageUpgrade python2-tkinterUpgrade python2-lxml-debuginfoUpgrade python39-plyUpgrade python39-wheel-wheelUpgrade python-psycopg2-docUpgrade python2-attrsUpgrade python39-rpm-macrosUpgrade python-pymongo-debugsourceUpgrade python2-markupsafeUpgrade python2-psycopg2-debugUpgrade python39-tkinterUpgrade babelUpgrade python2-funcsigsUpgrade python2-PyMySQLUpgrade python39-psycopg2-debuginfoUpgrade python39-pybind11Upgrade python2-psycopg2-testsUpgrade python-cryptography-debugsourceUpgrade python-cffi-debugsourceUpgrade python2-pytzUpgrade python39-PyMySQLUpgrade python2-toolsUpgrade python39-scipy-debuginfoUpgrade python2-rpm-macrosUpgrade python2-Cython-debuginfoUpgrade python2-dnsUpgrade python39-psutilUpgrade python39-develUpgrade python2-pytestUpgrade python-coverage-debugsourceUpgrade python39-pyparsingUpgrade python2-pygmentsUpgrade python2-pip-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pipUpgrade python-psutil-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-setuptoolsUpgrade python39-pyUpgrade python2-debugsourceUpgrade python2-numpy-f2pyUpgrade python39-debuginfoUpgrade python2-CythonUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pysocksUpgrade python2-sixUpgrade python39-debugUpgrade python39-pytestUpgrade python39-mod_wsgiUpgrade python2-setuptools_scmUpgrade python39-pyyaml-debuginfoUpgrade python2-pymongo-gridfsUpgrade python2-requestsUpgrade python39-pipUpgrade python2-mockUpgrade python2-backportsUpgrade python39-cffi-debuginfoUpgrade python39-idnaUpgrade python39-tomlUpgrade python39-CythonUpgrade python2-debuginfoUpgrade python2-libsUpgrade python39-pysocksUpgrade python39-attrsUpgrade python2Upgrade python2-docsUpgrade python2-bsonUpgrade numpy-debugsourceUpgrade python39-pluggyUpgrade python39-psycopg2Upgrade python2-docs-infoUpgrade python2-testUpgrade python2-wheelUpgrade python2-virtualenv | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-cffiUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade python2-numpyUpgrade python39-psutil-debuginfoUpgrade python2-psycopg2-debugUpgrade python-psycopg2-docUpgrade python39-numpy-debuginfoUpgrade python-coverage-debugsourceUpgrade python-pymongo-debugsourceUpgrade python2-bsonUpgrade python2-markupsafeUpgrade python39-psycopg2-debuginfoUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debuginfoUpgrade python39-mod_wsgiUpgrade python2-backportsUpgrade python39-pyyaml-debuginfoUpgrade python2-develUpgrade python-cffi-debugsourceUpgrade python39-scipy-debuginfoUpgrade python2-libsUpgrade PyYAML-debugsourceUpgrade python2Upgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python2-pymongo-gridfsUpgrade python2-coverage-debuginfoUpgrade python39-Cython-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-testUpgrade python39-cryptography-debuginfoUpgrade python2-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python39-psutilUpgrade python2-CythonUpgrade python2-scipy-debuginfoUpgrade python2-pyyamlUpgrade python39-pybind11Upgrade python2-bson-debuginfoUpgrade python39-pybind11-develUpgrade python39-numpy-f2pyUpgrade python39-cryptographyUpgrade python2-pymongoUpgrade python2-numpy-f2pyUpgrade python39-pyyamlUpgrade python2-lxml-debuginfoUpgrade python2-coverageUpgrade scipy-debugsourceUpgrade python39-lxml-debuginfoUpgrade python39-CythonUpgrade python39-numpyUpgrade python2-numpy-debuginfoUpgrade python2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-Cython-debuginfoUpgrade python-cryptography-debugsourceUpgrade python2-tkinterUpgrade python39-lxmlUpgrade python2-psycopg2Upgrade python39-scipyUpgrade python2-lxmlUpgrade python-lxml-debugsourceUpgrade python39-psycopg2-docUpgrade python39-psycopg2-testsUpgrade python2-pyyaml-debuginfoUpgrade python2-debugUpgrade python-psycopg2-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade Cython-debugsourceUpgrade python39-cffi-debuginfoUpgrade python2-tools | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.0.10 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python-setuptoolsUpgrade python310-setuptoolsUpgrade python3-setuptools-wheelUpgrade python39-setuptoolsUpgrade python36-setuptoolsUpgrade python3-setuptools-testUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python3-setuptoolsUpgrade python-setuptools (Ubuntu Pro)Upgrade python-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade pypy-setuptools (Ubuntu Pro)Upgrade pypy-setuptools | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub