Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-numpyUpgrade python3-setuptoolsUpgrade python39-pip-wheelUpgrade python2-urllib3Upgrade python39-mod_wsgiUpgrade python39-idleUpgrade python2-backportsUpgrade python39-chardetUpgrade python39-psycopg2Upgrade python39-wheel-wheelUpgrade python39-packagingUpgrade python39-psycopg2-docUpgrade python39-debugUpgrade python2-wheel-wheelUpgrade python-psycopg2-docUpgrade python2-pytzUpgrade python-nose-docsUpgrade python2-chardetUpgrade python2-pyUpgrade python2-setuptools-wheelUpgrade python2-lxmlUpgrade python2-markupsafeUpgrade python2-pygmentsUpgrade python2-pluggyUpgrade python39-scipyUpgrade python2-backports-ssl_match_hostnameUpgrade python2Upgrade python2-numpyUpgrade python2-pipUpgrade python39-CythonUpgrade python39-lxmlUpgrade python2-numpy-f2pyUpgrade python2-pymongo-gridfsUpgrade python39-psutilUpgrade python2-docs-infoUpgrade python39-wcwidthUpgrade python2-jinja2Upgrade python2-babelUpgrade python2-pip-wheelUpgrade python2-pymongoUpgrade python39-attrsUpgrade python39-numpy-docUpgrade python2-sixUpgrade python2-pysocksUpgrade python2-idnaUpgrade python2-setuptools_scmUpgrade python39-libsUpgrade python39-pluggyUpgrade python39-iniconfigUpgrade python39-plyUpgrade python2-docsUpgrade python39-tkinterUpgrade python2-mockUpgrade python39-PyMySQLUpgrade python2-develUpgrade python2-libsUpgrade python2-pyyamlUpgrade python39-pybind11Upgrade python2-noseUpgrade python2-numpy-docUpgrade python39-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python39-setuptoolsUpgrade python2-PyMySQLUpgrade python2-requestsUpgrade python39-testUpgrade python39-more-itertoolsUpgrade python39-pyparsingUpgrade python2-wheelUpgrade python2-docutilsUpgrade python2-CythonUpgrade python39-idnaUpgrade python2-tkinterUpgrade python2-testUpgrade python39-setuptools-wheelUpgrade python2-pytestUpgrade python39-pyyamlUpgrade python-sqlalchemy-docUpgrade python2-ipaddressUpgrade python2-virtualenvUpgrade python39-pyUpgrade python39-urllib3Upgrade python39-rpm-macrosUpgrade python39-pycparserUpgrade python2-funcsigsUpgrade python2-dnsUpgrade python39-sixUpgrade python39-pipUpgrade python39-develUpgrade python2-coverageUpgrade python2-debugUpgrade python39-pysocksUpgrade python2-rpm-macrosUpgrade python39-wheelUpgrade python39-pybind11-develUpgrade python2-attrsUpgrade python2-toolsUpgrade python39-cryptographyUpgrade python2-scipyUpgrade python2-psycopg2-testsUpgrade python39-pytestUpgrade python2-sqlalchemyUpgrade python2-bsonUpgrade platform-python-setuptoolsUpgrade python39-tomlUpgrade python39-cffiUpgrade python39-numpy-f2pyUpgrade babelUpgrade python3-setuptools-wheelUpgrade python39Upgrade python2-psycopg2Upgrade python39-requestsUpgrade python2-setuptoolsUpgrade python2-pytest-mock | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python2-setuptoolsUpgrade python3-setuptoolsUpgrade python38-setuptoolsUpgrade python-setuptools-wheel | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade platform-python-setuptoolsUpgrade python3-setuptoolsUpgrade python3-setuptools-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py27-setuptools44Upgrade py39-setuptoolsUpgrade py39-setuptools58 | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-setuptoolsUpgrade python-setuptools-wheelUpgrade python3-setuptools | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-setuptoolsUpgrade python-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python2-bsonUpgrade python39-sixUpgrade python2-noseUpgrade python2-pygmentsUpgrade python39-pipUpgrade python2-psycopg2-testsUpgrade python2-rpm-macrosUpgrade python2-urllib3Upgrade python2-requestsUpgrade python39-idnaUpgrade python2-psycopg2Upgrade python39-pybind11-develUpgrade python2-sixUpgrade python39-pyyamlUpgrade python39-pycparserUpgrade python39-pyUpgrade python39-setuptoolsUpgrade python39-scipyUpgrade python39-urllib3Upgrade python2-pyyamlUpgrade python39-plyUpgrade python2-tkinterUpgrade python2-numpy-f2pyUpgrade python2-dnsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-wheel-wheelUpgrade python39-tkinterUpgrade python2-markupsafeUpgrade python2-docsUpgrade python39-chardetUpgrade python39-CythonUpgrade python2-lxmlUpgrade python2-mockUpgrade python2-pytestUpgrade python2-wheelUpgrade python39-cryptographyUpgrade python39-setuptools-wheelUpgrade python2-debugUpgrade python39-pytestUpgrade python2-pipUpgrade python39-lxmlUpgrade python39-mod_wsgiUpgrade python39-numpy-f2pyUpgrade python39-iniconfigUpgrade python39-pyparsingUpgrade python39-numpyUpgrade python39-rpm-macrosUpgrade python-sqlalchemy-docUpgrade python2-pymongoUpgrade python39-tomlUpgrade python-psycopg2-docUpgrade python39-pysocksUpgrade python2-attrsUpgrade platform-python-setuptoolsUpgrade python39-debugUpgrade python2-psycopg2-debugUpgrade python-nose-docsUpgrade python39-more-itertoolsUpgrade python2-testUpgrade python2-setuptoolsUpgrade python2-virtualenvUpgrade python2-backportsUpgrade python39-requestsUpgrade python39-PyMySQLUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python2-CythonUpgrade python2-chardetUpgrade python39-develUpgrade python2-funcsigsUpgrade python2-setuptools-wheelUpgrade python39-wheelUpgrade python39-psycopg2-docUpgrade python39-psycopg2Upgrade python39-libsUpgrade python2-pysocksUpgrade python2-PyMySQLUpgrade python2-pluggyUpgrade python2-docutilsUpgrade python39-pybind11Upgrade python2-coverageUpgrade python39Upgrade python3-setuptools-wheelUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python2-libsUpgrade python2-docs-infoUpgrade python2-develUpgrade python2-babelUpgrade python39-numpy-docUpgrade python39-psycopg2-testsUpgrade python2-pyUpgrade python2-numpy-docUpgrade python2-numpyUpgrade python39-psutilUpgrade python2-pytzUpgrade python2Upgrade python39-wheel-wheelUpgrade python39-pluggyUpgrade python39-testUpgrade python2-toolsUpgrade python2-idnaUpgrade python39-cffiUpgrade babelUpgrade python39-idleUpgrade python2-pytest-mockUpgrade python39-pip-wheelUpgrade python39-attrsUpgrade python3-setuptoolsUpgrade python2-sqlalchemyUpgrade python2-jinja2Upgrade python39-packagingUpgrade python2-pip-wheelUpgrade python39-wcwidth | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python2-pymongoUpgrade python39-numpy-docUpgrade python39-pyyamlUpgrade python2-jinja2Upgrade python2-ipaddressUpgrade python39-testUpgrade python2-pluggyUpgrade python39-idleUpgrade python2-pymongo-debuginfoUpgrade python39-pip-wheelUpgrade python2-numpy-docUpgrade python39-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python39-pybind11-develUpgrade scipy-debugsourceUpgrade python39-more-itertoolsUpgrade python39-lxmlUpgrade python3-setuptools-wheelUpgrade python39-packagingUpgrade python39-numpy-debuginfoUpgrade python2-idnaNo solution existsUpgrade python2-sqlalchemyUpgrade python2-chardetUpgrade python39-scipyUpgrade python39-urllib3Upgrade python-psycopg2-debugsourceUpgrade python2-setuptools-wheelUpgrade python39-Cython-debuginfoUpgrade python39Upgrade python39-cryptographyUpgrade python2-numpy-debuginfoUpgrade python39-cryptography-debuginfoUpgrade python39-cffiUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python2-debugUpgrade python39-psycopg2-docUpgrade python2-scipy-debuginfoUpgrade python2-develUpgrade python39-psutil-debuginfoUpgrade python39-libsUpgrade python2-babelUpgrade python2-psycopg2-debuginfoUpgrade python39-requestsUpgrade python2-pyUpgrade python39-numpy-f2pyUpgrade python2-scipyUpgrade python39-numpyUpgrade python2-coverage-debuginfoUpgrade python2-noseUpgrade python-sqlalchemy-docUpgrade python39-wheelUpgrade python39-iniconfigUpgrade python2-setuptoolsUpgrade python2-numpyUpgrade python39-lxml-debuginfoUpgrade platform-python-setuptoolsUpgrade python-lxml-debugsourceUpgrade python39-wcwidthUpgrade python3-setuptoolsUpgrade python-pymongo-debuginfoUpgrade python2-psycopg2Upgrade python2-bson-debuginfoUpgrade python39-sixUpgrade python2-lxmlUpgrade python2-coverageUpgrade python39-psycopg2-testsUpgrade python2-pytest-mockUpgrade python39-chardetUpgrade Cython-debugsourceUpgrade python2-wheel-wheelUpgrade python39-pycparserUpgrade python2-pyyamlUpgrade python2-urllib3Upgrade python2-docutilsUpgrade python-nose-docsUpgrade python39-setuptools-wheelUpgrade python39-setuptoolsUpgrade python39-scipy-debuginfoUpgrade python2-requestsUpgrade python2-lxml-debuginfoUpgrade python2-docs-infoUpgrade python39-pyUpgrade python2-testUpgrade python2-virtualenvUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pygmentsUpgrade python2-pipUpgrade python2-PyMySQLUpgrade python-psutil-debugsourceUpgrade python-coverage-debugsourceUpgrade python39-psycopg2Upgrade python39-debugUpgrade python2-psycopg2-debugUpgrade python39-PyMySQLUpgrade python39-wheel-wheelUpgrade python39-pybind11Upgrade python-cryptography-debugsourceUpgrade python-cffi-debugsourceUpgrade python2-pytzUpgrade python39-idnaUpgrade python39-pipUpgrade python2-pymongo-gridfsUpgrade python2-mockUpgrade python2-markupsafeUpgrade python2-libsUpgrade python39-tomlUpgrade python2-backportsUpgrade python2-numpy-f2pyUpgrade python39-debuginfoUpgrade python39-pytestUpgrade python2-funcsigsUpgrade python2-Cython-debuginfoUpgrade python-pymongo-debugsourceUpgrade python39-CythonUpgrade PyYAML-debugsourceUpgrade python39-develUpgrade numpy-debugsourceUpgrade python2-wheelUpgrade python39-cffi-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-pysocksUpgrade python39-rpm-macrosUpgrade python2Upgrade python39-pluggyUpgrade python2-pip-wheelUpgrade python2-psycopg2-debug-debuginfoUpgrade python39-attrsUpgrade python39-pyparsingUpgrade python2-bsonUpgrade python2-debuginfoUpgrade python2-setuptools_scmUpgrade python39-pysocksUpgrade python39-mod_wsgiUpgrade python2-docsUpgrade python2-CythonUpgrade babelUpgrade python2-sixUpgrade python39-pyyaml-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python2-debugsourceUpgrade python39-plyUpgrade python2-rpm-macrosUpgrade python39-psutilUpgrade python2-dnsUpgrade python2-toolsUpgrade python39-tkinterUpgrade python-psycopg2-docUpgrade python2-attrsUpgrade python2-pytest | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python2-scipyUpgrade python-psutil-debugsourceUpgrade python2Upgrade python2-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-numpy-debuginfoUpgrade python-psycopg2-docUpgrade python-coverage-debugsourceUpgrade python39-psycopg2-debuginfoUpgrade PyYAML-debugsourceUpgrade python-pymongo-debugsourceUpgrade python39-cffiUpgrade python39-psutil-debuginfoUpgrade python2-libsUpgrade python2-sqlalchemyUpgrade python39-psutilUpgrade numpy-debugsourceUpgrade python2-CythonUpgrade python39-psycopg2Upgrade python2-psycopg2-debugUpgrade python2-numpyUpgrade python2-psycopg2-debug-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-mod_wsgiUpgrade python39-pyyaml-debuginfoUpgrade python2-markupsafeUpgrade python2-develUpgrade python-cffi-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python39-cryptography-debuginfoUpgrade python2-bsonUpgrade python2-pymongo-gridfsUpgrade python2-testUpgrade python2-backportsUpgrade python2-toolsUpgrade python39-scipyUpgrade python2-lxmlUpgrade python2-psycopg2Upgrade python39-numpy-f2pyUpgrade python2-tkinterUpgrade Cython-debugsourceUpgrade python2-psycopg2-testsUpgrade python39-cffi-debuginfoUpgrade python2-scipy-debuginfoUpgrade python39-pybind11Upgrade python39-cryptographyUpgrade python2-pymongoUpgrade python2-bson-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-debugUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python39-pybind11-develUpgrade python39-numpyUpgrade python39-lxml-debuginfoUpgrade python39-lxmlUpgrade python39-CythonUpgrade python2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-psycopg2-testsUpgrade scipy-debugsourceUpgrade python39-pyyamlUpgrade python2-pyyamlUpgrade python2-numpy-f2pyUpgrade python2-lxml-debuginfoUpgrade python2-coverageUpgrade python39-psycopg2-docUpgrade python-cryptography-debugsourceUpgrade python2-Cython-debuginfo | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.1.5 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python3-setuptools-testUpgrade python36-setuptoolsUpgrade python310-setuptoolsUpgrade python3-setuptools-wheelUpgrade python39-setuptoolsUpgrade python-setuptoolsUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade python-setuptoolsUpgrade python-setuptools (Ubuntu Pro)Upgrade python3-setuptools (Ubuntu Pro)Upgrade python3-setuptoolsUpgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro) | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub