PyPi: Setuptools

CVE-2025-47273

Safety vulnerability ID: 76752

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at May 17, 2025 Updated at May 21, 2025

Scan your Python projects for vulnerabilities →

Advisory

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Affected package

setuptools

Latest version: 80.8.0

Easily download, build, install, upgrade, and uninstall Python packages

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application