Skip to content
OpenAdvisories

Package · PyPI

uv

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical —
    GHSA-hq85-5cpj-mr62

    uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

    By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private k…

    uv PyPI