Threats tagged 'brew-pyqt-builder-cve-2024-6345'

CVE-2024-6345 is a high-severity vulnerability in the package_index module of pypa/setuptools up to version 69.1.1. It allows remote code execution via command injection through download functions that handle package URLs. This flaw can be exploited if these functions process user-controlled URLs, leading to arbitrary command execution on the affected system. The issue is fixed in setuptools version 70.0 and pyqt-builder versions 1.16.3 and later.