uv vulnerabilities (PyPI)
7 vulnerabilities.
-
uvPyPI uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised 9.1 Critical -
uvPyPI uv: Path traversal on Windows through wheel extraction 5.9 Medium -
uvPyPI uv before 0.11.15 Arbitrary File Write via Entry Point Names 8.7 High -
uvPyPI Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries 8.7 High -
uvPyPI Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 6.3 Medium -
uvPyPI uv has differential in tar extraction with PAX headers No score -
uvPyPI uv is vulnerable to ZIP payload obfuscation through parsing differentials 6.8 Medium