uv
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| uv has ZIP payload obfuscation through parsing differentials | uvRed Hat AI Inference Server/rhaiis-preview/vllm-cuda-rhel9 | Rust / CargoRed Hat | Medium | Fix reported | |
| uv: Path traversal on Windows through wheel extraction | uvuv | Rust / CargoPyPIRed Hat | Medium | Fix reported | |
| uv is vulnerable to arbitrary file write through entry point names | uvuv | Rust / CargoPyPI | Medium | Fix reported |