Aastral-sh

Products

Exploited and recent CVEs

• CVE-2026-114110 Medium 5.3 Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries 0.3%
• CVE-2026-114109 High 8.8 uv before 0.11.15 Arbitrary File Write via Entry Point Names 0.4%
• CVE-2025-71437 Medium 6.5 Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction 0.3%
• CVE-2026-104843 Medium 5.9 uv: Path traversal on Windows through wheel extraction 0.4%
• CVE-2026-32766 Low 1.7 astral-tokio-tar insufficiently validates PAX extensions during extraction 0.3%
• CVE-2025-13327 Medium 6.3 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 0.2%
• CVE-2025-62518 High 8.1 astral-tokio-tar Vulnerable to PAX Header Desynchronization 0.7%
• CVE-2025-59825 Medium 6.1 astral-tokio-tar has a path traversal in tar extraction 0.2%
• CVE-2025-54368 Medium 6.8 uv is vulnerable to ZIP payload obfuscation through parsing differentials 0.2%