Start for Free
pypi

setuptools

View on pypi registry
11 Total advisories
11 Vulnerabilities
0 Malware

Dependency scanning

Check whether setuptools is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
PyPI

GHSA-xmj3-9gf7-h52w

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
MEDIUM 6.1
PyPI

CVE-2026-59890

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
UNKNOWN
PyPI

CVE-2025-47273

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
HIGH 8.8
PyPI

CVE-2024-6345

setuptools vulnerable to Command Injection via package URL
HIGH 7.5
PyPI

CVE-2022-40897

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
MEDIUM 6.1
PyPI

CVE-2026-59890

CVE-2026-59890
HIGH 8.8
PyPI

CVE-2024-6345

setuptools vulnerable to Command Injection via package URL
UNKNOWN
PyPI

CVE-2022-40897

CVE-2022-40897
UNKNOWN
PyPI

CVE-2013-1633

CVE-2013-1633
HIGH 8.8
PyPI

CVE-2025-47273

CVE-2025-47273
HIGH 8.3
PyPI

CVE-2013-1633

Setuptools vulnerable to Man-in-the-middle attacks

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes