VULNRABLE / Vulnerability / GHSA-xmj3-9gf7-h52w

GHSA-xmj3-9gf7-h52w

LOW LOW setuptools OSV

Exploit verdict: No active-exploit signal

CVSS Score
2
Severity
LOW
EPSS
—
Source
OSV

Summary

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

What this means

GHSA-xmj3-9gf7-h52w is a low-severity vulnerability affecting setuptools, rated CVSS 2. Published October 23, 2026.

View full advisory at OSV →