https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 19:14:02 +0000 https://db.gcve.eu/vuln/ghsa-xmj3-9gf7-h52w <p><strong>Affected:</strong> PyPI: setuptools</p> <p>### Summary</p> <p>On Windows, attacker-controlled content in a wheel&#39;s `.dist-info/namespace_packages.txt` can cause setuptools&#39; legacy wheel installation path to create an `__init__.py` outside the requested `destination_eggdir`.</p> <p>The attacker can influence the destination path, but not the contents of the created file.</p> <p>### Details</p> <p>Tested setuptools commit:</p> <p>`6ead555c5fb29bc57fe6105b1bffc163f56fd558`</p> <p>Relevant source:</p> <p>`setuptools/wheel.py`</p> <p>SHA-256:</p> <p>`359b7e0d5dd8c3135653abe08a8ed5dc0352eadfd7df22cb5e2b5303b7c3cafd`</p> <p>The relevant call path is:</p> <p>`Wheel(wheel_path).install_as_egg(destination)` → `_install_as_egg` → `_convert_metadata` → `_fix_namespace_packages`</p> <p>A wheel can provide attacker-controlled content in:</p> <p>`&lt;distribution&gt;.dist-info/namespace_packages.txt`</p> <p>The namespace value is eventually used approximately as:</p> <p>```python mod_dir = os.path.join(destination_eggdir, *mod.split(&#39;.&#39;)) mod_init = os.path.join(mod_dir, &#39;__init__.py&#39;)</p> <p>If mod is a Windows drive-qualified absolute path containing no dots, mod.split(&#39;.&#39;) preserves it as a single component. On Windows, os.path.join(destination_eggdir, absolute_component) discards the original base directory and resolves to the attacker-supplied absolute path. The existing wheel filename and ZIP traversal checks do not validate this metadata value before it is subsequently interpreted as a filesystem path.</p> <p>```markdown ### PoC</p> <p>The reproduction was performed entirely inside a disposable temporary directory.</p> <p>Layout:</p> <p>```text san…</p> <p><strong>Affected:</strong> PyPI: setuptools</p> <p>### Summary</p> <p>On Windows, attacker-controlled content in a wheel&#39;s `.dist-info/namespace_packages.txt` can cause setuptools&#39; legacy wheel installation path to create an `__init__.py` outside the requested `destination_eggdir`.</p> <p>The attacker can influence the destination path, but not the contents of the created file.</p> <p>### Details</p> <p>Tested setuptools commit:</p> <p>`6ead555c5fb29bc57fe6105b1bffc163f56fd558`</p> <p>Relevant source:</p> <p>`setuptools/wheel.py`</p> <p>SHA-256:</p> <p>`359b7e0d5dd8c3135653abe08a8ed5dc0352eadfd7df22cb5e2b5303b7c3cafd`</p> <p>The relevant call path is:</p> <p>`Wheel(wheel_path).install_as_egg(destination)` → `_install_as_egg` → `_convert_metadata` → `_fix_namespace_packages`</p> <p>A wheel can provide attacker-controlled content in:</p> <p>`&lt;distribution&gt;.dist-info/namespace_packages.txt`</p> <p>The namespace value is eventually used approximately as:</p> <p>```python mod_dir = os.path.join(destination_eggdir, *mod.split(&#39;.&#39;)) mod_init = os.path.join(mod_dir, &#39;__init__.py&#39;)</p> <p>If mod is a Windows drive-qualified absolute path containing no dots, mod.split(&#39;.&#39;) preserves it as a single component. On Windows, os.path.join(destination_eggdir, absolute_component) discards the original base directory and resolves to the attacker-supplied absolute path. The existing wheel filename and ZIP traversal checks do not validate this metadata value before it is subsequently interpreted as a filesystem path.</p> <p>```markdown ### PoC</p> <p>The reproduction was performed entirely inside a disposable temporary directory.</p> <p>Layout:</p> <p>```text san…</p> https://db.gcve.eu/vuln/ghsa-xmj3-9gf7-h52w