{"action":"Upgrade setuptools to 84.1.0 or later.","affected":[{"fixed":"84.1.0","introduced":"38.2.2"}],"component":"setuptools","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["84.1.0"],"ghsa_id":"GHSA-xmj3-9gf7-h52w","id":"tcs_01M5NDP918V8Z227MSW23S2NYN","modified_at":"2026-10-23T22:00:03.739009766Z","published_at":"2026-10-23T21:44:11Z","references":["https://osv.dev/vulnerability/GHSA-xmj3-9gf7-h52w","https://github.com/pypa/setuptools/security/advisories/GHSA-xmj3-9gf7-h52w","https://github.com/pypa/setuptools/pull/5329","https://github.com/pypa/setuptools/commit/6d07b8d17890dda58d944ac51e58f54af92d52af","https://github.com/pypa/setuptools","https://github.com/pypa/setuptools/releases/tag/v84.1.0"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-xmj3-9gf7-h52w","url":"https://osv.dev/vulnerability/GHSA-xmj3-9gf7-h52w"}],"summary":"setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description"}