uv vulnerabilities (Root)

2 vulnerabilities.

• uv Root uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised GHSA-hq85-5cpj-mr62 Fix available 9.1 CriticalOctober 20, 2026
• uv Root uv before 0.11.15 Arbitrary File Write via Entry Point Names CVE-2026-114109 Fix available 8.7 HighMay 29, 2026