What’s Vulnerable › Products

pypa setuptools vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your pypa setuptools version is affected

Latest pypa setuptools vulnerabilities

• CVE-2026-59890 — setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ (CVSS 6.1)
• CVE-2025-47273 — setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write (CVSS 8.8)
• CVE-2024-6345 — Remote Code Execution in pypa/setuptools (CVSS 8.8)
• CVE-2022-40897 — pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS) (CVSS 5.9)
• CVE-2013-1633 — (CVSS 6.8)