setuptools — CVE history (PyPI)
setuptools
2 CVEs affect the setuptools PyPI package. Latest disclosed: 2025-05-17. Full CVE history sourced from NVD.
Summary
- Package
setuptools(PyPI)- Total CVEs
2- Actively exploited (CISA KEV)
- 0
- Highest CVSS
- —
- Latest disclosed
- 2025-05-17
Recent CVEs (top 2)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-47273 | — | — | — | 2025-05-17 | setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. |
CVE-2013-1633 | — | — | — | 2013-08-06 | easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted resp… |