| CVE-2026-114110 |
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by…
|
8.7
Élevée
|
21 oct. 2026 |
| CVE-2026-114109 |
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the…
|
8.7
Élevée
|
21 oct. 2026 |
| CVE-2025-71437 |
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that…
|
8.7
Élevée
|
21 oct. 2026 |
| CVE-2026-104843 |
uv is a Python package and project manager written in Rust
|
5.9
Moyenne
|
2 oct. 2026 |
| CVE-2025-13327 |
Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
|
6.3
Moyenne
|
27 févr. 2026 |
| CVE-2025-54368 |
uv is a Python package and project manager written in Rust
|
6.8
Moyenne
|
8 août 2025 |