Login Request a demo
AS
Vendor
astral-sh
2 products with CVEs on record
9
CVEs
0
On KEV
4
New 30D
Products
UV
uv
astral-sh
8.8
6 CVEs0 on KEV4 new
TO
tokio-tar
astral-sh
8.1
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114110
UV
uv
astral-sh
5.3
0%
Oct 21Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries
CVE-2026-114109
UV
uv
astral-sh
8.8
0%
Oct 21uv before 0.11.15 Arbitrary File Write via Entry Point Names
CVE-2025-71437
UV
uv
astral-sh
6.5
0%
Oct 21Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction
CVE-2026-104843
UV
uv
astral-sh
5.9
0%
Oct 2uv: Path traversal on Windows through wheel extraction
CVE-2026-32766
TO
tokio-tar
astral-sh
5.3
0%
Mar 20astral-tokio-tar insufficiently validates PAX extensions during extraction
CVE-2025-13327
UV
uv
astral-sh
6.3
0%
Feb 27Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
CVE-2025-62518
TO
tokio-tar
astral-sh
8.1
1%
Oct 21astral-tokio-tar Vulnerable to PAX Header Desynchronization
CVE-2025-59825
TO
tokio-tar
astral-sh
6.1
0%
Sep 23astral-tokio-tar has a path traversal in tar extraction
CVE-2025-54368
UV
uv
astral-sh
6.8
0%
Aug 8uv is vulnerable to ZIP payload obfuscation through parsing differentials