sashay

Sashay Introducción ℹ️ Sashay es un instalador automático multifunción para herramientas útiles basadas en Linux. Hay más de 340 herramientas disponibles. Instalación⬇️ pip install -U sashay Categorías de herramientas Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing...

EUVD-2026-91675

uv: Path traversal on Windows through wheel extraction...

GHSA-2CV4-CQWR-GWF7 uv: Path traversal on Windows through wheel extraction

Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during wheel installation. A malicious wheel could use this to place an executable outside of the intended environment, including in a directory already present o...

CVE-2026-104843

A flaw was found in uv. An attacker could achieve arbitrary code execution on a Windows system by tricking a user into installing a specially crafted Python wheel package. During archive extraction, files can be written outside the intended target directory, allowing an attacker to place maliciou...

CVE-2026-104843

uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...

CVE-2026-104843

The Python package and project manager uv (written in Rust) is vulnerable to a path traversal flaw during wheel extraction on Windows systems. Affected versions range from 0.12.7 until 0.12.18 . An attacker can trick a user into installing a specially crafted Python wheel package that, during ext...

CVE-2026-104843 uv: Path traversal on Windows through wheel extraction

uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...

CVE-2026-104843 uv: Path traversal on Windows through wheel extraction

uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...

PT-2026-104357

Name of the Vulnerable Software and Affected Versions uv versions 0.12.7 through 0.12.17 Description On Windows, the wheel extraction process can be manipulated by a malicious wheel to write files outside the intended installation prefix. This allows for the placement of an executable file into a...

wheelaudit

wheelaudit Escáner de seguridad para archivos Python Wheel — analiza archivos .whl en busca de problemas de seguridad antes de la instalación. Motivado por CVEs recientes en el manejo de wheels de Python: CVE-2026-24049 : Path traversal en el desempaquetado de wheels permite la manipulación de...

Rocky Linux 8.6 [CIQ] Security Update: python2-wheel / python2-wheel-wheel Multiple Vulnerabilities (ciqsa-2026_0196)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260196 advisory. This advisory aggregates security fixes for the python-wheel SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Linux Distros Unpatched Vulnerability : CVE-2026-102930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for...

Rocky Linux 8.6 [CIQ] Security Update: python39-pip / python39-pip-wheel (ciqsa-2026_0233)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260233 advisory. This advisory aggregates security fixes for the python3x-pip SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: python2-pip / python2-pip-wheel Multiple Vulnerabilities (ciqsa-2026_0176)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260176 advisory. This advisory aggregates security fixes for the python2-pip SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python38-setuptools / python38-setuptools-wheel Multiple Vulnerabilities (ciqsa-2026_0221)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260221 advisory. This advisory aggregates security fixes for the python3x-setuptools SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735,...

Rocky Linux 10.0 [CIQ] Security Update: python3-setuptools / python3-setuptools-wheel (crlsa-2025_9940)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259940 advisory. setuptools: Path Traversal Vulnerability in setuptools PackageIndex CVE-2025-47273 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: python3-setuptools / python3-setuptools-wheel (ALMALINUX9.2:CLSA-2026:1786468462)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786468462 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList...

Rocky Linux 9 [CIQ] Security Update: python3.12-setuptools / python3.12-setuptools-wheel (crlsa-2024_5533)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245533 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: python3.11-setuptools / python3.11-setuptools-wheel (ciqsa-2026_0483)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260483 advisory. This advisory aggregates security fixes for the python3.11-setuptools SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding...

Rocky Linux 9.4 [CIQ] Security Update: python3.12-wheel / python3.12-wheel-wheel (ciqsa-2026_1199)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261199 advisory. This advisory aggregates security fixes for the python3.12-wheel SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2026-24049. Tenable has extracted the preceding...