[Git][security-tracker-team/security-tracker][master] mark uv as unimportant

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b21eced1 by Moritz Muehlenhoff at 2026-11-03T20:50:54+01:00
mark uv as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17220,11 +17220,13 @@ CVE-2026-114112 (Sharp before 0.35.4 bundles a vulnerable libheif dependency tha
 CVE-2026-114111 (sharp before 0.35.5 bundles a librsvg dependency affected by a memory- ...)
 	NOT-FOR-US: Sharp
 CVE-2026-114110 (Astral uv before 0.11.6 contains a path traversal vulnerability that a ...)
-	- uv <unfixed> (bug #1152821)
+	- uv <unfixed> (unimportant; bug #1152821)
 	NOTE: https://github.com/astral-sh/uv/security/advisories/GHSA-pjjw-68hj-v9mw
+	NOTE: src:uv doesn't build the full stack yet, only a Python binding
 CVE-2026-114109 (uv before 0.11.15 contains a path traversal vulnerability that allows  ...)
-	- uv <unfixed> (bug #1152820)
+	- uv <unfixed> (unimportant; bug #1152820)
 	NOTE: https://github.com/astral-sh/uv/security/advisories/GHSA-4gg8-gxpx-9rph
+	NOTE: src:uv doesn't build the full stack yet, only a Python binding
 CVE-2026-114108 (HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authenti ...)
 	NOT-FOR-US: Vibe-Trading
 CVE-2026-114107 (HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b21eced1403f768c85e939c7ab1eca9386d40384

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b21eced1403f768c85e939c7ab1eca9386d40384
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/6e4eeb52/attachment.htm>