Rust advisories / crate
Security history · uv · data from Oct 24, 2026
Is uv safe to use? Its security history
VerdictNo open advisories. 3 past vulnerabilities were fixed.
3advisories on record
3vulnerabilities
0unmaintained notices
nonenewest fixed version
Every advisory, newest first
- VulnerabilityGHSA-2cv4-cqwr-gwf7 · 2026-10-05uv: Path traversal on Windows through wheel extraction
- VulnerabilityGHSA-4gg8-gxpx-9rph · 2026-05-29uv is vulnerable to arbitrary file write through entry point names
- VulnerabilityGHSA-v653-r55g-hcmg · 2026-02-27uv has ZIP payload obfuscation through parsing differentials
Check your version
Run cargo tree -i uv to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?