| CVE-2026-114110 |
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-114109 |
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2025-71437 |
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-104843 |
uv is a Python package and project manager written in Rust
|
5.9
Medium
|
Oct 2, 2026 |
| CVE-2025-13327 |
Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
|
6.3
Medium
|
Feb 27, 2026 |
| CVE-2025-54368 |
uv is a Python package and project manager written in Rust
|
6.8
Medium
|
Aug 8, 2025 |