https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:10:40 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-104843 <p>uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user&#39;s PATH. Non-Windows hosts are not affected. This issue is fixed in version 0.12.18.</p> <p>uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user&#39;s PATH. Non-Windows hosts are not affected. This issue is fixed in version 0.12.18.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-104843