Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-47273

29
FAUCET Score

CVE-2025-47273 is a path traversal vulnerability in setuptools versions prior to 78.1.1, affecting Python packages and Debian Linux. This flaw allows an authenticated attacker to write files to arbitrary locations on the filesystem, potentially leading to remote code execution. With a CVSS score of 8.8 (HIGH), it represents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 78.1.1CPE matchmatch criteria
cpe:2.3:a:python:setuptools:*:*:*:*:*:*:*:*
11.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.7HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
HIGH
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
PROOF_OF_CONCEPT
CvssVersion
4.0

Exploit Intelligence

EPSS Score
1.45%
Probability of exploitation in next 30 days
EPSS Percentile
70.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0145 is in the 68th percentile among its peer group of 17,822 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (136)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
github_advisorypatch availablevia nvd_reference
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 python-setuptools 69.0.3-5 on Azure Linux 3.0Fixed in: 69.0.3-5
microsoftpatch availablevia msrc
Product: 19458-17084Fixed in: 69.0.3-5
moodlepatch availablevia llm_extracted
Fixed in: 7.0.0
pippatch availablevia ghsa
Product: setuptoolsFixed in: 78.1.1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: python39:3.9-8040020250825101027.63cd9eba
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: python-setuptools-0:39.2.0-6.el8_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: python39:3.9-8060020250826083212.6a631399
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: python-setuptools-0:39.2.0-7.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: python39:3.9-8060020250826083212.6a631399
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: python-setuptools-0:0.9.8-7.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python3.12-setuptools-0:68.2.2-5.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python39:3.9-8100020250823160619.d47b87a4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python39-devel:3.9-8100020250823160619.d47b87a4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python-setuptools-0:39.2.0-9.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: python-setuptools-0:39.2.0-5.el8_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: python39:3.9-8040020250825101027.63cd9eba
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: python-setuptools-0:39.2.0-6.el8_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: python-setuptools-0:69.0.3-12.el10_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: python3-setuptools-0:39.2.0-10.el7_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python3.11-setuptools-0:65.5.1-4.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: python-setuptools-0:39.2.0-7.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: python39:3.9-8060020250826083212.6a631399
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: python-setuptools-0:39.2.0-7.el8_6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: python3.11-setuptools-0:65.5.1-2.el8_8.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: python-setuptools-0:39.2.0-7.el8_8.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: python3.11-setuptools-0:65.5.1-2.el8_8.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: python39:3.9-8080020250901141228.93c2fc2f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: python-setuptools-0:39.2.0-7.el8_8.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: fence-agents-0:4.10.0-86.el9_6.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: python3.12-setuptools-0:68.2.2-5.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: python3.11-setuptools-0:65.5.1-4.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: python-setuptools-0:53.0.0-13.el9_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: fence-agents-0:4.10.0-20.el9_0.23
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: python-setuptools-0:53.0.0-13.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: fence-agents-0:4.10.0-43.el9_2.14
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: python3.11-setuptools-0:65.5.1-2.el9_2.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: python-setuptools-0:53.0.0-12.el9_2.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: fence-agents-0:4.10.0-62.el9_4.15
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: python3.12-setuptools-0:68.2.2-3.el9_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: python3.11-setuptools-0:65.5.1-2.el9_4.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: python-setuptools-0:53.0.0-12.el9_4.2
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.4.1Fixed in: openshift-builds/openshift-builds-shared-resource-rhel9:sha256:427f633ade9e76cb30c23e77ef39eb9a566a2ab20b60e63fa6b6889635ac48d7
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.4.1Fixed in: openshift-builds/openshift-builds-shared-resource-webhook-rhel9:sha256:a6937042cb5b024a49298517c159a25c520eb9fafa54219a6b375d3ad906e3f3
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.4.1Fixed in: openshift-builds/openshift-builds-shared-resource-rhel9:sha256:1ef0ac67f7bdb99d431a68b30ac8362c9c54a5cd6b4dfe38a80e3e1e6635c6c0
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.4.1Fixed in: openshift-builds/openshift-builds-shared-resource-webhook-rhel9:sha256:a00dbdc777867a7d0046b21c235ff443fcd3dd8b6bc7e9adf8e9ce5779cea22f
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.5.2Fixed in: openshift-builds/openshift-builds-shared-resource-rhel9:sha256:3680bbf4b3277ec1e89a37d047839da024c540daed402e1489bfe95cbfae4177
View patch
redhatpatch availablevia redhat_api
Product: Builds for Red Hat OpenShift 1.5.2Fixed in: openshift-builds/openshift-builds-shared-resource-webhook-rhel9:sha256:84ab99604c3f6097015ac2bf6d63094df7b544b805fca2f514f4934c8999577a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.5Fixed in: rhdh/rhdh-hub-rhel9:sha256:1d4c7fa815e480d838f9e375c65e78ef0e851ce093c84483a994673129d4643c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.6Fixed in: rhdh/rhdh-hub-rhel9:sha256:79618b38d6f02457954b227d538e238fdebbb72a220af5bd6be3cfab3ad0f262
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/instructlab-intel-rhel9:sha256:cf0ec4ad1520ff2ce83420846830286e036f310f880cf8a533f0966c35ebd32f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-intel-rhel9:sha256:601064840ac29ea7d4a977efb506df226a2931d5079ec9f432bdf60095bf7c2e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/instructlab-nvidia-rhel9:sha256:a7e2df4276aaba0d23430c7c3314e05b005fe5628d588bc1f4f979a35571fa5c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-azure-amd-rhel9:sha256:f77167ea53b46b91631679ed84aab2373ff56dc62cba946296be212443bc2a99
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/instructlab-amd-rhel9:sha256:03f22e965af16fe84aed7d30e7b8db00dead11d9fd4b11e3c9abb2e68dd910f1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-gcp-nvidia-rhel9:sha256:a83229f005c78e271c774f3eda26421fedbc4b8cf1ac3fe94234899c6d677124
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-amd-rhel9:sha256:c029b66a3354ee6fd186a1f05aff31b5834e611b9d5b326b65b16829d6b98d1f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-nvidia-rhel9:sha256:dd412fc0dde3dee492839c28f8ed003bb17fe5fe1be375031b24c84bb36fb8cd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-aws-nvidia-rhel9:sha256:385028a96717418982de197f8f0a9052edf12f80a50bd8ab53ca72203a4ba5d8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux AI 1.5Fixed in: rhelai1/bootc-azure-nvidia-rhel9:sha256:427596ae2591a30a0218b7cfdd858ccad96178ddc2618cdf0a6e4e9af36685bf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 6.17Fixed in: satellite/iop-advisor-engine-rhel9:sha256:27eaac9b93113fd78a8932d112d9d37b940e337207df25f03ead05fffcf6be55
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed in: automation-controller-0:4.6.19-1.el8ap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed in: automation-controller-0:4.6.19-1.el9ap
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: python-setuptools
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: python-setuptools
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel9
redhatno patchvia redhat_api
Product: cert-manager Operator for Red Hat OpenShiftFixed in: cert-manager/cert-manager-istio-csr-rhel9
redhatno patchvia redhat_api
Product: cert-manager Operator for Red Hat OpenShiftFixed in: cert-manager/cert-manager-operator-rhel9
redhatno patchvia redhat_api
Product: cert-manager Operator for Red Hat OpenShiftFixed in: cert-manager/jetstack-cert-manager-acmesolver-rhel9
redhatno patchvia redhat_api
Product: cert-manager Operator for Red Hat OpenShiftFixed in: cert-manager/jetstack-cert-manager-rhel9
redhatno patchvia redhat_api
Product: Confidential Compute AttestationFixed in: confidential-compute-attestation-tech-preview/trustee-rhel9
redhatno patchvia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch6-rhel9
redhatno patchvia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-curator5-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed-tech-preview/lightspeed-console-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
redhatno patchvia redhat_api
Product: Red Hat build of Quarkus Native builderFixed in: mandrel-for-jdk-21-rhel8
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: python3x-setuptools
redhatno patchvia redhat_api
Product: Red Hat Offline Knowledge PortalFixed in: offline-knowledge-portal/rhokp-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-feast-operator-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-feature-server-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-modelmesh-runtime-adapter-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhods/odh-ml-pipelines-api-server-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhods/odh-ml-pipelines-artifact-manager-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhods/odh-ml-pipelines-cache-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhods/odh-ml-pipelines-persistenceagent-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhods/odh-ml-pipelines-scheduledworkflow-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel8
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/client-server-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/rekor-backfill-redis-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/rekor-cli-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/rekor-search-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/rekor-server-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/segment-reporting-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/trillian-database-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/trillian-redis-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/tuffer-rhel9
redhatno patchvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/tuftool-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-git-init-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/docling-serve-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI)Fixed in: rhelai1/ui-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-events-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-entrypoint-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-controller-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-cli-tkn-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-chains-controller-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-nop-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-proxy-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-operator-webhook-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-pipelines-as-code-cli-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-pipelines-as-code-controller-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-resolvers-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-results-api-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-results-watcher-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-rhel8-operator
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-sidecarlogresults-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-triggers-controller-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-triggers-core-interceptors-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-triggers-webhook-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-webhook-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-workingdirinit-rhel8
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8

Vendor Advisories (7)

moodlellm-moodle-6e02e64c77549a47HIGH

Third-Party Package Updates in Splunk SOAR - November 2025

Nov 26, 2025
honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
pipGHSA-5rjg-fvgr-3xxfhigh

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

May 19, 2025
redhatCVE-2025-47273Moderate

setuptools: Path Traversal Vulnerability in setuptools PackageIndex

May 17, 2025
microsoft2025-May/CVE-2025-47273

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

May 13, 2025

References

lists.debian.org / debian-lts-announce/2025/05/msg00035.html
Mailing List
github.com / pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py
Product
github.com / pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b
Patch
github.com / pypa/setuptools/issues/4946
ExploitIssue Tracking
github.com / pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf
ExploitVendor Advisory