Setuptools

Latest version: v75.8.0

Safety actively analyzes 696928 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 54 of 114

36.0.1

Not secure
=======

* 1042: Fix import in py27compat module that still
referenced six directly, rather than through the externs
module (vendored packages hook).

36.0.0

=======

* 980 and others: Once again, Setuptools vendors all
of its dependencies. It seems to be the case that in
the Python ecosystem, all build tools must run without
any dependencies (build, runtime, or otherwise). At
such a point that a mechanism exists that allows
build tools to have dependencies, Setuptools will adopt
it.

35.0.2

Not secure
=======

* 1015: Fix test failures on Python 3.7.

* 1024: Add workaround for Jython 2581 in monkey module.

35.0.1

Not secure
=======

* 992: Revert change introduced in v34.4.1, now
considered invalid.

* 1016: Revert change introduced in v35.0.0 per 1014,
referencing 436. The approach had unintended
consequences, causing sdist installs to be missing
files.

35.0.0

Not secure
=======

* 436: In egg_info.manifest_maker, no longer read
the file list from the manifest file, and instead
re-build it on each build. In this way, files removed
from the specification will not linger in the manifest.
As a result, any files manually added to the manifest
will be removed on subsequent egg_info invocations.
No projects should be manually adding files to the
manifest and should instead use MANIFEST.in or SCM
file finders to force inclusion of files in the manifest.

34.4.1

Not secure
=======

* 1008: In MSVC support, use always the last version available for Windows SDK and UCRT SDK.

* 1008: In MSVC support, fix "vcruntime140.dll" returned path with Visual Studio 2017.

* 992: In msvc.msvc9_query_vcvarsall, ensure the
returned dicts have str values and not Unicode for
compatibility with os.environ.

Page 54 of 114

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.