Get real-time updates on Telegram

uv: Path traversal on Windows through wheel extraction

CVE-2026-104843 affects uv. EPSS 0.00426 (percentile 0.34603), scored 2026-10-04. Affected range: >= 0.12.7, < 0.12.18. Fixed version: 0.12.18. Affected range: >= 0.12.7, < 0.12.18. Fixed version: 0.12.18.

Published 2026-10-06 00:14:27.335761+00:00

CVE

CVE-2026-104843

Product

uv

CCR priority

0.1 /100 (P5)

EPSS

0.00426 · percentile 0.34603 · 2026-10-04

KEV

no

Affected products

• uv · >= 0.12.7, < 0.12.18 · Fixed version: 0.12.18
• uv · >= 0.12.7, < 0.12.18 · Fixed version: 0.12.18

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-104843.html