Known vulnerabilities in Astral uv 0.8.0

Vendor: Astral
Website: https://astral.sh/
Total Security Bulletins: 5

Security bulletins (5)

Secuity bulletin Severity Status Published
SB2026040998: Path traversal in uv Low
Patched
09.04.2026
SB2026040997: Improper input validation in uv Low
Patched
09.04.2026
SB2026040996: Path traversal in uv Low
Patched
09.04.2026
SB2025112881: Incorrect handling of ZIP archives in Astral uv Medium
Patched
28.11.2025
SB2025081150: Path traversal in Astral uv High
Patched
11.08.2025