uv vulnerabilities
CVEs whose affected-version data names the uv package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
GHSA-pjjw-68hj-v9mwLowuv vulnerable to arbitrary file deletion through RECORD entries
uv vulnerable to arbitrary file deletion through RECORD entries
▾ Sunlituv · uvvia OSV
CVE-2025-13327Mediumuv allows ZIP payload obfuscation through parsing differentials
uv allows ZIP payload obfuscation through parsing differentials
▾ Sunlituv · uvEPSS 0.15%via OSV
CVE-2025-54368Mediumuv allows ZIP payload obfuscation through parsing differentials
uv allows ZIP payload obfuscation through parsing differentials
▾ Sunlituv · uvEPSS 0.20%via OSV