[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fehbP3Meddeg2Sb-yrKZabTIFQE_7P3LkX4aqZniKLfU":3,"g5a-risk:CVE-2022-40897":157},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":106,"weaknesses":107,"weaknessesCount":45,"isActivelyExploited":116,"cisaInfo":26,"otxData":26,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":152,"notableEvents":153},"CVE-2022-40897","What is CVE-2022-40897?","Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.","Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom Packa...","2022-12-23T00:15:13.987","2025-11-04T16:15:52.26",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],0.02632,[37,35,35,35,35,35,35],0.02503,"Medium",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"python","setuptools","*","cpe:2.3:a:python:setuptools:*:*:*:*:*:*:*:*",1,[47,52,56,60,64,67,74,77,81,84,86,88,90,94,96,98,100,102,104],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002Ffe8a98e696241487ba6ac9f91faa38ade939ec5d\u002Fsetuptools\u002Fpackage_index.py#L200","GitHub",[51],"Third Party Advisory",{"url":53,"source":49,"tags":54},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F43a9c9bfa6aa626ec2a22540bea28d2ca77964be",[55,51],"Patch",{"url":57,"source":49,"tags":58},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcompare\u002Fv65.5.0...v65.5.1",[59,51],"Release Notes",{"url":61,"source":62,"tags":63},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FADES3NLOE5QJKBLGNZNI2RGVOSQXA37R\u002F","Fedoraproject",[],{"url":65,"source":62,"tags":66},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYNA2BAH2ACBZ4TVJZKFLCR7L23BG5C3H\u002F",[],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fpyup.io\u002Fposts\u002Fpyup-discovers-redos-vulnerabilities-in-top-python-packages\u002F","Pyup",[71,55,72,73],"Exploit","Technical Description","Vendor Advisory",{"url":75,"source":69,"tags":76},"https:\u002F\u002Fpyup.io\u002Fvulnerabilities\u002FCVE-2022-40897\u002F52495\u002F",[51],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230214-0001\u002F","Netapp",[],{"url":82,"source":79,"tags":83},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240621-0006\u002F",[],{"url":48,"source":49,"tags":85},[51],{"url":53,"source":49,"tags":87},[55,51],{"url":57,"source":49,"tags":89},[59,51],{"url":91,"source":92,"tags":93},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html","Debian",[],{"url":61,"source":62,"tags":95},[],{"url":65,"source":62,"tags":97},[],{"url":68,"source":69,"tags":99},[71,55,72,73],{"url":75,"source":69,"tags":101},[51],{"url":78,"source":79,"tags":103},[],{"url":82,"source":79,"tags":105},[],19,[108],{"id":109,"name":110,"description":111,"extendedDescription":112,"status":113,"abstraction":114,"structure":115},"CWE-1333","Inefficient Regular Expression Complexity","The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.","Some regular expression engines have a feature called \"backtracking\". If the token cannot match, the engine \"backtracks\" to a position that may result in a different token that can match.\n                Backtracking becomes a weakness if all of these conditions are met:","Draft","Base","Simple",false,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2022-40897? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-40897, a medium severity cyber security vulnerability from 2022. Python Packaging Authority (PyPA) setuptools before 65.5....","CVE-2022-40897, CVE-2022-40897 vulnerability, CVE-2022-40897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, python security, setuptools vulnerability","\u002Fwhat-is\u002Fcve-2022-40897",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":10,"dateModified":11,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-40897","Cybersecurity","CVE-2022-40897, CVE-2022-40897 vulnerability, CVE-2022-40897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144],{"Operator":26,"Negate":26,"Nodes":145},[146],{"Operator":147,"Negate":116,"CPEMatch":148},"OR",[149],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":151,"VersionEndIncluding":26},"F9A94E39-308F-4E14-8A0C-0327B4F50AAD","65.5.1",[],[],{"lastModified":11,"cacheTime":155,"version":156},1793222074682,"2.0",{"score":158,"band":38,"action":159,"scoredAt":160},45,"Plan remediation","2026-10-28T06:55:59.162874+00:00"]