CVE-2026-62002

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

EUVD-2026-112966

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

CVE-2026-62002

The WordPress Meals & Wheels theme versions

CVE-2026-62002 WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

CVE-2026-62002 WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

CVE-2026-62002: ThemeREX Meals & Wheels: Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

ThemeREX Meals & Wheels deserialization injection vulnerability

ThemeREX Meals & Wheels versions 1.1.13 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection, which may allow attackers to carry out PHP object injection attacks...

SUSE CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

Linux Distros Unpatched Vulnerability : CVE-2026-114109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts o...

Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pjjw-68hj-v9mw. This link is maintained to preserve external references. Original Description Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by...

GHSA-M3WX-QQMX-QXVF Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pjjw-68hj-v9mw. This link is maintained to preserve external references. Original Description Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by...

DEBIAN-CVE-2026-114110

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to...

DEBIAN-CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

CVE-2026-114110

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to...

EUVD-2026-106913

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a malicious wheel whose RECORD references files outside the installation prefix, causing uv to...

EUVD-2026-106912

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

CVE-2026-114109

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted consolescripts or guiscripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...

PT-2026-120235

uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console scripts or gui scripts entry point names. Attackers who induce users to install a malicious wheel can place executables in PATH directories,...