astral-sh
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, astral-sh recorded 4 security vulnerabilities in the last 90 days across 1 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, uv had the most security vulnerabilities in the astral-sh ecosystem, with 4 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114110Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD EntriesCVE-2026-114109uv before 0.11.15 Arbitrary File Write via Entry Point NamesCVE-2025-71437Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar ExtractionCVE-2026-104843uv: Path traversal on Windows through wheel extractionCVE-2026-32766astral-tokio-tar insufficiently validates PAX extensions during extraction9 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityLow |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |