astral-sh uv

• CVE-2026-114110 Medium 5.3 Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries 0.3%
• CVE-2026-114109 High 8.8 uv before 0.11.15 Arbitrary File Write via Entry Point Names 0.4%
• CVE-2025-71437 Medium 6.5 Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction 0.3%
• CVE-2026-104843 Medium 5.9 uv: Path traversal on Windows through wheel extraction 0.4%
• CVE-2025-13327 Medium 6.3 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 0.2%
• CVE-2025-54368 Medium 6.8 uv is vulnerable to ZIP payload obfuscation through parsing differentials 0.2%