Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | Disclosure1 |
| 2026-03-11 | 1 | Patch1 |
This addresses the following vulnerabilities: CVE-2022-40897 CVE-2025-47273 CVE-2025-48924 451224723, 451224123 Security fixes for apigee-fluent-bit 8/19
Post summary
A patch notice for apigee-fluent-bit addressing multiple CVEs released 8/19, with no PoC, exploit code, or technical details provided.
Security Advisory: Multiple critical vulnerabilities identified in #Python pip package manager (CVE-2025-47273+, USN-8010-1). Affects #Ubuntu LTS releases 16.04-20.04. Read more: 👉 https://tinyurl.com/2tv2pe3n #Security https://t.co/eFjSLofq2k
Post summary
The tweet announces a security advisory that multiple critical vulnerabilities have been identified in the Python pip package manager affecting Ubuntu LTS releases 16.04‑20.04, with a link provided for further details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 11.0 | - | - |
| App | python | setuptools | - | - | - |