ghsa:GHSA-XMJ3-9GF7-H52W: setuptools >= 38.2.2, < 84.1.0

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description. Affected range: >= 38.2.2, < 84.1.0. Fixed version: 84.1.0.

Affected technology

setuptools · >= 38.2.2, < 84.1.0
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 24-Oct-2026 01:47 UTC

Product: setuptools
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-24 01:45:06.114611+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-xmj3-9gf7-h52w.html