uv
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| uv vulnerable to arbitrary file deletion through RECORD entries | uvRed Hat AI Inference Server/rhaiis/model-opt-cuda-rhel9 | PyPIRed Hat | Low | Fix reported | |
| uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised | uv | PyPI | Critical | Fix reported | |
| uv: Path traversal on Windows through wheel extraction | uvuv | Rust / CargoPyPIRed Hat | Medium | Fix reported | |
| uv allows ZIP payload obfuscation through parsing differentials | uv | PyPI | Medium | Fix reported | |
| uv is vulnerable to arbitrary file write through entry point names | uvuv | Rust / CargoPyPI | Medium | Fix reported | |
| uv has differential in tar extraction with PAX headers | uv | PyPI | Low | Fix reported | |
| uv allows ZIP payload obfuscation through parsing differentials | uv | PyPI | Medium | Fix reported |