Affected versions of the bootloader were potentially vulnerable to uncontrolled search path element issues. An attacker could potentially exploit this by injecting DLLs that load runtime dependencies from an application's temporary directory, leading to persistence or arbitrary code execution. The vulnerability existed in the bootloader process handling in one-file mode. Users should ensure that system DLLs are pre-loaded to prevent such vulnerabilities.

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Affected versions of the bootloader were potentially vulnerable to uncontrolled search path element issues. An attacker could potentially exploit this by injecting DLLs that load runtime dependencies from an application's temporary directory, leading to persistence or arbitrary code execution. The vulnerability existed in the bootloader process handling in one-file mode. Users should ensure that system DLLs are pre-loaded to prevent such vulnerabilities.

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Affected versions of the bootloader were potentially vulnerable to uncontrolled search path element issues. An attacker could potentially exploit this by injecting DLLs that load runtime dependencies from an application's temporary directory, leading to persistence or arbitrary code execution. The vulnerability existed in the bootloader process handling in one-file mode. Users should ensure that system DLLs are pre-loaded to prevent such vulnerabilities.

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Affected versions of the bootloader were potentially vulnerable to uncontrolled search path element issues. An attacker could potentially exploit this by injecting DLLs that load runtime dependencies from an application's temporary directory, leading to persistence or arbitrary code execution. The vulnerability existed in the bootloader process handling in one-file mode. Users should ensure that system DLLs are pre-loaded to prevent such vulnerabilities.

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

Affected versions of the bootloader were potentially vulnerable to uncontrolled search path element issues. An attacker could potentially exploit this by injecting DLLs that load runtime dependencies from an application's temporary directory, leading to persistence or arbitrary code execution. The vulnerability existed in the bootloader process handling in one-file mode. Users should ensure that system DLLs are pre-loaded to prevent such vulnerabilities.

Affected versions of Setuptools are vulnerable to Path Traversal via PackageIndex.download(). The impact is Arbitrary File Overwrite: An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.