CGA-p6wh-jxvc-2c6c

Published

Last updated

https://images.chainguard.dev/security/CGA-p6wh-jxvc-2c6c

Package

py3-pip

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-47273
GHSA-5rjg-fvgr-3xxf

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-47273
https://github.com/advisories/GHSA-5rjg-fvgr-3xxf

Updates

Status

Pending upstream fix

Impact

vendored setuptools is required by pip. This vendored version contains source code and will need to be upgraded by upstream due to major changes required in source

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-p6wh-jxvc-2c6c

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company