Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo

uv

cargo

A Python package and project manager

View on github.com · View on crates.io

Security Advisories for uv in cargo

Moderate
3 months ago

uv is vulnerable to arbitrary file write through entry point names GSA_kwCzR0hTQS00Z2c4LWd4cHgtOXJwaM4ABXv-

cargo, pypi uv
Moderate
6 months ago

uv has ZIP payload obfuscation through parsing differentials GSA_kwCzR0hTQS12NjUzLXI1NWctaGNtZ84ABS5V

cargo uv
Repackage
Moderate
10 months ago

uv allows ZIP payload obfuscation through parsing differentials GSA_kwCzR0hTQS1wcWhmLXAzOWctM3g2NM4ABN-8

pypi uv
Repackage
Low
10 months ago

uv has differential in tar extraction with PAX headers GSA_kwCzR0hTQS13NDc2LXAyaDMtNzlnOc4ABNmo

pypi uv
Repackage
Moderate
about 1 year ago

uv allows ZIP payload obfuscation through parsing differentials GSA_kwCzR0hTQS04cWYzLXg4djUtMnBqOM4ABK3R

pypi uv

Filter by Severity

Moderate 4 Low 1