Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:13:44 +0000 BREW-ansible-CVE-2013-1633 — Setuptools vulnerable to Man-in-the-middle attacks https://cve.radiocsirt.org/vuln/brew-ansible-cve-2013-1633 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2013-1633 EUVD-2026-175159 https://cve.radiocsirt.org/vuln/euvd-2026-175159 EUVD-2026-175159 https://cve.radiocsirt.org/vuln/euvd-2026-175159 fkie_cve-2013-1633 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1633 <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1633 GHSA-27x4-j476-jp5f — Setuptools vulnerable to Man-in-the-middle attacks https://cve.radiocsirt.org/vuln/ghsa-27x4-j476-jp5f <p><strong>Affected:</strong> PyPI: setuptools</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> <p><strong>Affected:</strong> PyPI: setuptools</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> https://cve.radiocsirt.org/vuln/ghsa-27x4-j476-jp5f gsd-2013-1633 https://cve.radiocsirt.org/vuln/gsd-2013-1633 gsd-2013-1633 https://cve.radiocsirt.org/vuln/gsd-2013-1633 msrc_CVE-2013-1633 — easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform int… https://cve.radiocsirt.org/vuln/msrc_cve-2013-1633 msrc_CVE-2013-1633 https://cve.radiocsirt.org/vuln/msrc_cve-2013-1633 PYSEC-2013-22 https://cve.radiocsirt.org/vuln/pysec-2013-22 <p><strong>Affected:</strong> PyPI: setuptools</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> <p><strong>Affected:</strong> PyPI: setuptools</p> <p>easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.</p> https://cve.radiocsirt.org/vuln/pysec-2013-22