Login Request a demo
SE
Product
Setuptools
by Python · last CVE Jul 8, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities4Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Setuptools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47273
8.8
2%
May 17
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Affected: before 78.1.1
CVE-2026-59890
6.1
0%
Jul 8
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Affected: before 83.0.0
CVE-2022-40897
5.9
3%
Dec 23
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page
Affected: before 65.5.1
CVE-2013-1633
–
2%
Aug 6
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows…
Affected: through 0.7b4; 0.6.40; 0.6.41; 0.6.42; 0.6.43; 0.6.44; +5 more
Showing 4