CyberICT

CVE-2026-59890

Microsoft · Published July 13, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+. setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+

Affected Products

  • azl3 python-pip 24.2-9 on Azure Linux 3.0
  • azl3 python-virtualenv 20.36.1-5 on Azure Linux 3.0
  • azl3 python3 3.12.9-13 on Azure Linux 3.0
  • azl3 python-setuptools 69.0.3-5 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U