PyPI/setuptools: low
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
Action: Upgrade setuptools to 84.1.0 or later.
pip install setuptools==84.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 38.2.2 | 84.1.0 | - |
Fixed versions
| 84.1.0 |
Sources
- osv: GHSA-xmj3-9gf7-h52w
- https://github.com/pypa/setuptools/security/advisories/GHSA-xmj3-9gf7-h52w
- https://github.com/pypa/setuptools/pull/5329
- https://github.com/pypa/setuptools/commit/6d07b8d17890dda58d944ac51e58f54af92d52af
- https://github.com/pypa/setuptools
- https://github.com/pypa/setuptools/releases/tag/v84.1.0
published · modified · JSON