Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Setuptools could let attackers run code
published 28 days ago
Summary
The Python packaging tool setuptools has a security weakness that could let a malicious party execute code on a system that installs packages. Updating to the latest TuxCare rebuilt version (70.3.0.post2+tuxcare) removes the risk. Apply the update as soon as possible.
What to do
- Update python packaging authority setuptools to version 70.3.0.post2+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | python packaging authority | setuptools |
< 70.3.0.post2+tuxcare Fix: upgrade to 70.3.0.post2+tuxcare
|
Original advisory text
TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 70.3.0.post2+tuxcare.
Timeline
Published7 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
CLSA-2026-1791366380 · OSV
Track software like this
Free during beta