Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade babelUpgrade python39-pytestUpgrade python2-attrsUpgrade python2-testUpgrade python2-toolsUpgrade python3-setuptools-wheelUpgrade python2-funcsigsUpgrade python39-PyMySQLUpgrade python2-pyyamlUpgrade python39-tkinterUpgrade python2-setuptoolsUpgrade python2-libsUpgrade python2-wheelUpgrade python39-develUpgrade python39-plyUpgrade python39-pluggyUpgrade python39-libsUpgrade python39-pysocksUpgrade platform-python-setuptoolsUpgrade python2-develUpgrade python39-cffiUpgrade python2-pytest-mockUpgrade python2-psycopg2-testsUpgrade python2-psycopg2Upgrade python2-coverageUpgrade python39-pybind11Upgrade python39Upgrade python39-pybind11-develUpgrade python2-tkinterUpgrade python2-pytestUpgrade python2-bsonUpgrade python39-pycparserUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-debugUpgrade python2-virtualenvUpgrade python39-sixUpgrade python2-docsUpgrade python39-requestsUpgrade python2-docutilsUpgrade python39-testUpgrade python2-rpm-macrosUpgrade python2-setuptools_scmUpgrade python2-PyMySQLUpgrade python39-setuptoolsUpgrade python39-urllib3Upgrade python39-rpm-macrosUpgrade python2-sqlalchemyUpgrade python39-setuptools-wheelUpgrade python2-CythonUpgrade python39-pyyamlUpgrade python39-idnaUpgrade python39-more-itertoolsUpgrade python39-pipUpgrade python2-mockUpgrade python2-dnsUpgrade python2-requestsUpgrade python39-iniconfigUpgrade python2-numpy-docUpgrade python2-noseUpgrade python39-psycopg2-testsUpgrade python39-cryptographyUpgrade python39-pyparsingUpgrade python39-pyUpgrade python39-numpy-f2pyUpgrade python2-ipaddressUpgrade python2-debugUpgrade python39-wheelUpgrade python39-tomlUpgrade python2-scipyUpgrade python2Upgrade python2-pipUpgrade python2-pluggyUpgrade python39-psycopg2Upgrade python39-idleUpgrade python2-urllib3Upgrade python2-backportsUpgrade python39-chardetUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python-nose-docsUpgrade python39-scipyUpgrade python2-pyUpgrade python-psycopg2-docUpgrade python2-wheel-wheelUpgrade python2-pytzUpgrade python2-pip-wheelUpgrade python2-pysocksUpgrade python2-pygmentsUpgrade python39-numpy-docUpgrade python39-numpyUpgrade python39-psutilUpgrade python3-setuptoolsUpgrade python2-numpyUpgrade python39-lxmlUpgrade python2-numpy-f2pyUpgrade python2-docs-infoUpgrade python39-CythonUpgrade python39-packagingUpgrade python2-babelUpgrade python39-debugUpgrade python39-wcwidthUpgrade python2-backports-ssl_match_hostnameUpgrade python39-wheel-wheelUpgrade python2-markupsafeUpgrade python39-mod_wsgiUpgrade python39-attrsUpgrade python39-pip-wheelUpgrade python2-jinja2Upgrade python2-sixUpgrade python39-psycopg2-docUpgrade python2-lxmlUpgrade python2-setuptools-wheelUpgrade python2-idnaUpgrade python2-chardet | Feb 22, 2023 | Dec 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python3-setuptoolsUpgrade python2-setuptoolsUpgrade python38-setuptoolsUpgrade python-setuptools-wheel | Mar 7, 2023 | Dec 23, 2022 |
| Centos_linux | — | Upgrade platform-python-setuptoolsUpgrade python3-setuptoolsUpgrade python3-setuptools-wheel | Feb 22, 2023 | Dec 23, 2022 |
| Debian | — | Upgrade setuptools | Jul 30, 2024 | Dec 23, 2022 |
| Freebsd | — | Upgrade py27-setuptools44Upgrade py39-setuptools58Upgrade py39-setuptools | Apr 14, 2023 | Apr 9, 2023 |
| Gentoo Linux | — | Upgrade dev-python/setuptools. | May 6, 2024 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 20, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | May 8, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-setuptools | Jun 9, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-setuptoolsUpgrade python2-setuptoolsUpgrade python-setuptools-wheel | Apr 13, 2023 | Dec 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-setuptoolsUpgrade python3-setuptools | Mar 9, 2023 | Dec 23, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade python2-pipUpgrade python2-debugUpgrade python2-markupsafeUpgrade python39-iniconfigUpgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python39-pipUpgrade python2-pytestUpgrade python2-wheel-wheelUpgrade python39-tkinterUpgrade python39-rpm-macrosUpgrade python39-setuptoolsUpgrade python2-bsonUpgrade python39-sixUpgrade python39-CythonUpgrade python39-idnaUpgrade python2-lxmlUpgrade python2-numpy-f2pyUpgrade python39-chardetUpgrade python39-mod_wsgiUpgrade python2-rpm-macrosUpgrade python39-setuptools-wheelUpgrade python39-tomlUpgrade python2-pygmentsUpgrade python2-docsUpgrade python2-sixUpgrade python2-pyyamlUpgrade python39-pyparsingUpgrade python39-urllib3Upgrade python-psycopg2-docUpgrade python2-dnsUpgrade python2-tkinterUpgrade python39-scipyUpgrade python-sqlalchemy-docUpgrade python2-wheelUpgrade python39-pyUpgrade python39-cryptographyUpgrade python2-psycopg2Upgrade python39-pyyamlUpgrade python39-numpyUpgrade python39-plyUpgrade python39-lxmlUpgrade python39-pycparserUpgrade python39-pysocksUpgrade python2-noseUpgrade python39-pytestUpgrade python2-pymongoUpgrade python39-numpy-f2pyUpgrade python2-urllib3Upgrade python2-requestsUpgrade python39-pybind11-develUpgrade python2-backports-ssl_match_hostnameUpgrade python39-wheelUpgrade python39-pybind11Upgrade python39-psycopg2-docUpgrade python2-pyUpgrade python39-pluggyUpgrade python39-pip-wheelUpgrade python39-idleUpgrade python2-pip-wheelUpgrade python-nose-docsUpgrade python39-packagingUpgrade python2-psycopg2-debugUpgrade python2-docs-infoUpgrade python2-setuptools_scmUpgrade python2-coverageUpgrade python2-babelUpgrade python39-psycopg2-testsUpgrade python39-numpy-docUpgrade python39Upgrade python3-setuptools-wheelUpgrade python2-libsUpgrade python2-develUpgrade python2-pymongo-gridfsUpgrade python2-setuptoolsUpgrade python2-numpyUpgrade babelUpgrade python39-testUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-testUpgrade python2Upgrade python2-pytzUpgrade python2-numpy-docUpgrade python39-more-itertoolsUpgrade platform-python-setuptoolsUpgrade python39-wcwidthUpgrade python39-attrsUpgrade python3-setuptoolsUpgrade python2-jinja2Upgrade python39-debugUpgrade python2-attrsUpgrade python2-sqlalchemyUpgrade python39-PyMySQLUpgrade python39-develUpgrade python39-requestsUpgrade python2-scipyUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-CythonUpgrade python2-chardetUpgrade python2-backportsUpgrade python39-wheel-wheelUpgrade python39-cffiUpgrade python2-idnaUpgrade python2-pytest-mockUpgrade python2-docutilsUpgrade python2-pluggyUpgrade python39-psycopg2Upgrade python39-libsUpgrade python2-setuptools-wheelUpgrade python2-pysocksUpgrade python2-PyMySQLUpgrade python39-psutil | Feb 22, 2023 | Dec 22, 2022 |
| Redhat_linux | — | Upgrade python39-setuptoolsUpgrade python2-docsUpgrade python2-setuptools_scmUpgrade babelUpgrade python2-lxml-debuginfoUpgrade python39-pysocksUpgrade python39-mod_wsgiUpgrade PyYAML-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-plyUpgrade python2-backports-ssl_match_hostnameUpgrade python39-psycopg2-debuginfoUpgrade python2-pip-wheelUpgrade python39-pyUpgrade python2-sixUpgrade python2-CythonUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python2-wheelUpgrade python39-pluggyUpgrade python2-virtualenvUpgrade python39-CythonUpgrade python-pymongo-debugsourceUpgrade python2-attrsUpgrade python2-docs-infoUpgrade python2-Cython-debuginfoUpgrade python39-rpm-macrosUpgrade python39-psycopg2Upgrade python2-testUpgrade python-psycopg2-docUpgrade python2-pymongo-gridfsUpgrade python2-mockUpgrade python2-backportsUpgrade python39-pipUpgrade python39-tomlUpgrade python39-develUpgrade python39-cffi-debuginfoUpgrade python2-libsUpgrade python2-pytzUpgrade python39-debuginfoUpgrade python-cryptography-debugsourceUpgrade python2-numpy-f2pyUpgrade python2-pygmentsUpgrade python-coverage-debugsourceUpgrade python-cffi-debugsourceUpgrade python2-debugsourceUpgrade python39-debugUpgrade python2-PyMySQLUpgrade python39-pytestUpgrade python-psutil-debugsourceUpgrade python39-attrsUpgrade python39-PyMySQLUpgrade python2-pipUpgrade python2-markupsafeUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pysocksUpgrade python2-requestsUpgrade python39-pybind11Upgrade python39-wheel-wheelUpgrade python39-psutilUpgrade python2Upgrade python2-pytestUpgrade python2-rpm-macrosUpgrade python2-funcsigsUpgrade python39-pyparsingUpgrade python2-psycopg2-debugUpgrade python39-idnaUpgrade python2-debuginfoUpgrade python39-tkinterUpgrade python2-toolsUpgrade numpy-debugsourceUpgrade python39-scipy-debuginfoUpgrade python2-dnsUpgrade python39-testUpgrade python39-psutil-debuginfoUpgrade python39-pycparserUpgrade python39-debugsourceUpgrade python2-pyyaml-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-pluggyUpgrade python-psycopg2-debuginfoUpgrade python2-debugUpgrade python2-lxmlUpgrade scipy-debugsourceUpgrade Cython-debugsourceUpgrade python2-bson-debuginfoUpgrade python2-pyUpgrade python2-noseUpgrade python39-numpy-f2pyUpgrade python-lxml-debugsourceUpgrade python39-cryptographyUpgrade python39-numpy-docUpgrade python-pymongo-debuginfoUpgrade python39-chardetUpgrade python39-psycopg2-testsUpgrade python2-wheel-wheelUpgrade python2-psycopg2-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39-psycopg2-docUpgrade python39-pyyamlUpgrade python-nose-docsUpgrade python3-setuptoolsUpgrade python2-develUpgrade python39Upgrade python2-pyyamlUpgrade python2-pymongoUpgrade python2-docutilsUpgrade python2-babelUpgrade python-sqlalchemy-docUpgrade python2-scipy-debuginfoUpgrade python39-requestsUpgrade python39-numpyUpgrade python2-coverageUpgrade python39-iniconfigNo solution existsUpgrade python-psycopg2-debugsourceUpgrade python2-pytest-mockUpgrade python2-chardetUpgrade python39-lxmlUpgrade python39-cryptography-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-numpyUpgrade python2-numpy-docUpgrade python39-libsUpgrade python2-scipyUpgrade python39-Cython-debuginfoUpgrade python39-urllib3Upgrade python39-scipyUpgrade python39-numpy-debuginfoUpgrade python2-sqlalchemyUpgrade python2-jinja2Upgrade python2-ipaddressUpgrade python3-setuptools-wheelUpgrade python39-sixUpgrade python39-wheelUpgrade python39-more-itertoolsUpgrade python39-wcwidthUpgrade python2-urllib3Upgrade python2-setuptools-wheelUpgrade python39-cffiUpgrade python39-packagingUpgrade python39-setuptools-wheelUpgrade python2-tkinterUpgrade python2-psycopg2Upgrade python39-pybind11-develUpgrade python2-setuptoolsUpgrade platform-python-setuptoolsUpgrade python2-coverage-debuginfoUpgrade python39-pip-wheelUpgrade python39-idleUpgrade python2-idna | Feb 22, 2023 | Dec 23, 2022 |
| Rocky_linux | — | Upgrade python39-psutil-debuginfoUpgrade python2-numpyUpgrade python2-psycopg2-debugUpgrade python2-CythonUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-sqlalchemyUpgrade python39-psutilUpgrade python39-cffiUpgrade python39-numpy-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-libsUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade python2-backportsUpgrade python39-mod_wsgiUpgrade python2-pymongo-debuginfoUpgrade python2-bsonUpgrade python2-psycopg2-debuginfoUpgrade python39-Cython-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python-cffi-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-develUpgrade python2Upgrade python2-pymongo-gridfsUpgrade python2-testUpgrade python2-coverage-debuginfoUpgrade python-psycopg2-docUpgrade python-psutil-debugsourceUpgrade python2-markupsafeUpgrade python2-debuginfoUpgrade python2-scipyUpgrade python39-cryptography-debuginfoUpgrade python2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python39-numpy-f2pyUpgrade python2-Cython-debuginfoUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python2-debugUpgrade python-psycopg2-debugsourceUpgrade python2-numpy-debuginfoUpgrade python39-numpyUpgrade python39-lxml-debuginfoUpgrade python39-lxmlUpgrade python39-CythonUpgrade python-cryptography-debugsourceUpgrade python39-cffi-debuginfoUpgrade python2-toolsUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2-testsUpgrade python39-cryptographyUpgrade python2-bson-debuginfoUpgrade Cython-debugsourceUpgrade python39-pybind11-develUpgrade python2-pymongoUpgrade python39-pybind11Upgrade python-lxml-debugsourceUpgrade python2-lxmlUpgrade python2-coverageUpgrade python2-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python39-pyyamlUpgrade python39-psycopg2-testsUpgrade python39-psycopg2-docUpgrade python2-pyyamlUpgrade python2-numpy-f2pyUpgrade python-psycopg2-debuginfoUpgrade python39-scipyUpgrade python2-psycopg2 | Mar 12, 2024 | Dec 23, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.0.10 | Sep 30, 2025 | Dec 22, 2022 |
| Suse | — | Upgrade python310-setuptoolsUpgrade python-setuptoolsUpgrade python36-setuptoolsUpgrade python3-setuptools-wheelUpgrade python3-setuptools-testUpgrade python39-setuptoolsUpgrade python3-setuptools | Jan 17, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade pypy-setuptoolsUpgrade pypy-setuptools (Ubuntu Pro)Upgrade python-setuptools (Ubuntu Pro)Upgrade python3-setuptoolsUpgrade python3-setuptools (Ubuntu Pro)Upgrade python-setuptools | Jan 23, 2023 | Dec 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub