Product by Astral-sh

    Uv

    6 known vulnerabilities in Uv (Astral-sh), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Uv (Astral-sh)
    HighCVE-2026-114109

    uv before 0.11.15 Arbitrary File Write via Entry Point Names

    also in 1 other product

    		8.8
    HighCVE-2026-114110

    Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries

    		5.3
    HighCVE-2025-71437

    Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction

    		6.5
    MediumCVE-2026-104843

    uv: Path traversal on Windows through wheel extraction

    		—
    MediumCVE-2025-13327

    Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

    also in 2 other products

    		6.3
    MediumCVE-2025-54368

    uv is vulnerable to ZIP payload obfuscation through parsing differentials

    		—

    All products by Astral-sh