Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pypa/setuptools

              main @ 7d53128
            

Fixes

CVEs

CRITICAL

Peak severity

48.3%

Coverage

Highlights

Path Traversal: 11 prior fixes. Scrutinize any change in this area.

setuptools/sandbox.py: most-fixed (7 issues). Treat as high-risk during review.

27 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Multiple fixes in archive extraction indicate a persistent vulnerability surface for path traversal via malicious archives, including '..' components and symlink chains.

Sandbox Escape: The sandbox has been repeatedly bypassed through file write operations, builtin overrides, and exemption logic, indicating a fundamental weakness in enforcing filesystem write restrictions.

Path Traversal: Multiple fixes in egg_info.py address path traversal in file list processing and manifest writing, indicating a recurring issue with unsafe file paths from various sources.