PT-2026-34894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 platform UV component where deconfigured sockets are mapped to SOCK EMPTY 0xffff. This mapping leads to a system panic during the allocation of UV hub info...

python311-uv-0.10.11-1.1 on GA media (moderate)

python311-uv-0.10.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:10380-1 Rating: moderate Cross-References: CVE-2026-31812 CVSS scores: CVE-2026-31812 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-31812 SUSE : 6.9...

OPENSUSE-SU-2026:10380-1 python311-uv-0.10.11-1.1 on GA media

These are all security issues fixed in the python311-uv-0.10.11-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: zola, berg, parseable, samply, wadm, wasmcloud, uv, vector, lychee, nushell, pixi, zed, xh, qdrant, cargo-audit, sccache, py3-xet-core, zizmor, wash...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: zola, berg, parseable, samply, wadm, wasmcloud, uv, vector, lychee, nushell, pixi, zed, xh, qdrant, cargo-audit, sccache, py3-xet-core, zizmor, wash...

CVE-2026-31812 vulnerabilities

Vulnerabilities for packages: nushell, parseable, uv, pixi, lychee, zola, berg, wasmcloud, wash, zed, asciinema, wadm, py3-xet-core, sccache, qdrant, vector, xh, komodo, fnm, samply, apollo-router, cargo-audit, garage, zizmor...

GHSA-6XVM-J4WR-6V98 vulnerabilities

Vulnerabilities for packages: nushell, parseable, uv, pixi, lychee, zola, berg, wasmcloud, wash, zed, asciinema, wadm, py3-xet-core, sccache, qdrant, vector, xh, komodo, fnm, samply, apollo-router, cargo-audit, garage, zizmor...

openSUSE 16 Security Update : python-uv (openSUSE-SU-2026:20330-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20330-1 advisory. This update for python-uv fixes the following issue: - CVE-2025-13327: parsing differentials when processing specially crafted ZIP archives during packa...

Security update for python-uv (important)

openSUSE security update: security update for python-uv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20330-1 Rating: important References: bsc1258993 Cross-References: CVE-2025-13327 CVSS scores: CVE-2025-13327 SUSE : 8.8...

OPENSUSE-SU-2026:20330-1 Security update for python-uv

This update for python-uv fixes the following issue: - CVE-2025-13327: parsing differentials when processing specially crafted ZIP archives during package installation can lead to arbitrary code execution bsc1258993...

GHSA-65P9-R9H6-22VJ vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, zellij, rustup, parseable, linkerd2, efs-utils, uv, linkerd-extension-init, buck2, lychee, ntpd-rs, nushell, pixi, rustls-ffi, linkerd2-proxy, zed, ztunnel, cargo-audit, py3-xet-core, zizmor, deno...

GHSA-HFPC-8R3F-GW53 vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, zellij, rustup, parseable, linkerd2, efs-utils, uv, linkerd-extension-init, buck2, lychee, ntpd-rs, nushell, pixi, rustls-ffi, linkerd2-proxy, zed, ztunnel, cargo-audit, py3-xet-core, zizmor, deno...

GHSA-VW5V-4F2Q-W9XF vulnerabilities

Vulnerabilities for packages: linkerd-network-validator, zellij, rustup, parseable, linkerd2, efs-utils, uv, linkerd-extension-init, buck2, lychee, ntpd-rs, nushell, pixi, rustls-ffi, linkerd2-proxy, zed, ztunnel, cargo-audit, py3-xet-core, zizmor, deno...

GHSA-VW5V-4F2Q-W9XF vulnerabilities

Vulnerabilities for packages: nushell, parseable, linkerd2-cni-plugin, pixi, uv, lychee, zellij, linkerd-extension-init, efs-utils, linkerd-network-validator, zed, linkerd2-proxy, py3-xet-core, deno, ztunnel, linkerd2, komodo, cargo-audit, buck2, rustls-ffi, garage, rustup, zizmor, ntpd-rs...

GHSA-65P9-R9H6-22VJ vulnerabilities

Vulnerabilities for packages: nushell, parseable, linkerd2-cni-plugin, pixi, uv, lychee, zellij, linkerd-extension-init, efs-utils, linkerd-network-validator, zed, linkerd2-proxy, py3-xet-core, deno, ztunnel, linkerd2, komodo, cargo-audit, buck2, rustls-ffi, garage, rustup, zizmor, ntpd-rs...

metasploit-mcp

metasploit-mcp Metasploit Framework MCP server for exploit ex...

PYSEC-2026-2295

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP Zipped Information Package archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package...

CVE-2025-13327

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP Zipped Information Package archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package...

CVE-2025-13327 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP Zipped Information Package archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package...

CVE-2025-13327 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP Zipped Information Package archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package...