Setuptools
Approved changes feed: RSS · Atom
cpe:2.3:a:python:setuptools:69.1.1:*:*:*:*:*:*:*
part: a version: 69.1.1 update: *
| Vendor | Python (b57ad93a-6195-5192-9423-6cfad6044a8b) |
|---|---|
| Product | Setuptools (43f7b15f-6553-581a-9552-2ceaa087ebf8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6345 |
vulnerable | 2026-06-03 14:58:02.676832 |
Remote Code Execution in pypa/setuptools
HIGH (8.8)
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.
Published: 2024-07-15T00:00:14.545Z
Updated: 2025-11-04T16:15:51.183Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.