https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:13:38.695006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-ansible-cve-2013-1633 BREW-ansible-CVE-2013-1633 — Setuptools vulnerable to Man-in-the-middle attacks 2026-10-04T07:13:39.352427+00:00

Affected: Homebrew: ansible

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.

 https://cve.radiocsirt.org/vuln/euvd-2026-175159 EUVD-2026-175159 2026-10-04T07:13:39.352490+00:00 EUVD-2026-175159 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1633 fkie_cve-2013-1633 2026-10-04T07:13:39.352508+00:00

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.

 https://cve.radiocsirt.org/vuln/ghsa-27x4-j476-jp5f GHSA-27x4-j476-jp5f — Setuptools vulnerable to Man-in-the-middle attacks 2026-10-04T07:13:39.352532+00:00

Affected: PyPI: setuptools

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.

 https://cve.radiocsirt.org/vuln/gsd-2013-1633 gsd-2013-1633 2026-10-04T07:13:39.352553+00:00 gsd-2013-1633 https://cve.radiocsirt.org/vuln/msrc_cve-2013-1633 msrc_CVE-2013-1633 — easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform int… 2026-10-04T07:13:39.352565+00:00 msrc_CVE-2013-1633 https://cve.radiocsirt.org/vuln/pysec-2013-22 PYSEC-2013-22 2026-10-04T07:13:39.352584+00:00

Affected: PyPI: setuptools

easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.