[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fehbP3Meddeg2Sb-yrKZabTIFQE_7P3LkX4aqZniKLfU":3,"g5a-risk:CVE-2022-40897":156},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":105,"weaknesses":106,"weaknessesCount":44,"isActivelyExploited":115,"cisaInfo":26,"otxData":26,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":151,"notableEvents":152},"CVE-2022-40897","What is CVE-2022-40897?","Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.","Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom Packa...","2022-12-23T00:15:13.987","2025-11-04T16:15:52.26",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.02503,[35,35,35,35,35,35,35],"Medium",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"python","setuptools","*","cpe:2.3:a:python:setuptools:*:*:*:*:*:*:*:*",1,[46,51,55,59,63,66,73,76,80,83,85,87,89,93,95,97,99,101,103],{"url":47,"source":48,"tags":49},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002Ffe8a98e696241487ba6ac9f91faa38ade939ec5d\u002Fsetuptools\u002Fpackage_index.py#L200","GitHub",[50],"Third Party Advisory",{"url":52,"source":48,"tags":53},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F43a9c9bfa6aa626ec2a22540bea28d2ca77964be",[54,50],"Patch",{"url":56,"source":48,"tags":57},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcompare\u002Fv65.5.0...v65.5.1",[58,50],"Release Notes",{"url":60,"source":61,"tags":62},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FADES3NLOE5QJKBLGNZNI2RGVOSQXA37R\u002F","Fedoraproject",[],{"url":64,"source":61,"tags":65},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H\u002F",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fpyup.io\u002Fposts\u002Fpyup-discovers-redos-vulnerabilities-in-top-python-packages\u002F","Pyup",[70,54,71,72],"Exploit","Technical Description","Vendor Advisory",{"url":74,"source":68,"tags":75},"https:\u002F\u002Fpyup.io\u002Fvulnerabilities\u002FCVE-2022-40897\u002F52495\u002F",[50],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230214-0001\u002F","Netapp",[],{"url":81,"source":78,"tags":82},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240621-0006\u002F",[],{"url":47,"source":48,"tags":84},[50],{"url":52,"source":48,"tags":86},[54,50],{"url":56,"source":48,"tags":88},[58,50],{"url":90,"source":91,"tags":92},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html","Debian",[],{"url":60,"source":61,"tags":94},[],{"url":64,"source":61,"tags":96},[],{"url":67,"source":68,"tags":98},[70,54,71,72],{"url":74,"source":68,"tags":100},[50],{"url":77,"source":78,"tags":102},[],{"url":81,"source":78,"tags":104},[],19,[107],{"id":108,"name":109,"description":110,"extendedDescription":111,"status":112,"abstraction":113,"structure":114},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.","Some regular expression engines have a feature called \"backtracking\". If the token cannot match, the engine \"backtracks\" to a position that may result in a different token that can match.\n                Backtracking becomes a weakness if all of these conditions are met:","Draft","Base","Simple",false,[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2022-40897? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-40897, a medium severity cyber security vulnerability from 2022. Python Packaging Authority (PyPA) setuptools before 65.5....","CVE-2022-40897, CVE-2022-40897 vulnerability, CVE-2022-40897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, python security, setuptools vulnerability","\u002Fwhat-is\u002Fcve-2022-40897",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-40897","Cybersecurity","CVE-2022-40897, CVE-2022-40897 vulnerability, CVE-2022-40897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143],{"Operator":26,"Negate":26,"Nodes":144},[145],{"Operator":146,"Negate":115,"CPEMatch":147},"OR",[148],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":150,"VersionEndIncluding":26},"F9A94E39-308F-4E14-8A0C-0327B4F50AAD","65.5.1",[],[],{"lastModified":11,"cacheTime":154,"version":155},1792243517440,"2.0",{"score":157,"band":37,"action":158,"scoredAt":159},45,"Plan remediation","2026-10-16T06:56:38.416256+00:00"]