SE
Product
Setuptools
by Python · last CVE Jul 8, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add Setuptools to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59890
6.1
0%
Jul 8
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Affected: before 83.0.0
CVE-2022-40897
5.9
3%
Dec 23
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page
Affected: before 65.5.1
Showing 2