Vulnerabilities in pypa

6 results

Vexday analysis

PyPA apresenta 6 vulnerabilidades documentadas sem exploração ativa registrada (KEV: 0), com risco moderado concentrado em directory traversal (CWE-22). Uma vulnerabilidade foi publicada nos últimos 90 dias, indicando atividade recente no ecossistema, embora nenhuma tenha alcançado nível crítico de severidade.

CVE-2022-21668HIGHPipenv's requirements.txt parsing allows malicious index url in commentsEPSS 3.9%CVE-2024-6345HIGHRemote Code Execution in pypa/setuptoolsEPSS 1.9%CVE-2025-47273HIGHsetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteEPSS 1.5%CVE-2026-59890MEDIUMsetuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+EPSS 0.4%CVE-2026-24049HIGHwheel Allows Arbitrary File Permission Modification via Path TraversalEPSS 0.4%CVE-2026-22702MEDIUMvirtualenv Has TOCTOU Vulnerabilities in Directory CreationEPSS 0.1%