[Git][security-tracker-team/security-tracker][master] uv n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
064a3bb1 by Moritz Muehlenhoff at 2026-10-03T00:58:22+02:00
uv n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -456,7 +456,8 @@ CVE-2026-104845 (Seroval facilitates JS value stringification, including complex
 CVE-2026-104844 (PostCSS Selector Parser is a CSS selector parser that integrates with  ...)
 	TODO: check
 CVE-2026-104843 (uv is a Python package and project manager written in Rust. From 0.12. ...)
-	TODO: check
+	- uv <not-affected> (Windows-specific)
+	NOTE: https://github.com/astral-sh/uv/security/advisories/GHSA-2cv4-cqwr-gwf7
 CVE-2026-104733 (User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows ...)
 	TODO: check
 CVE-2026-104721 (Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (l ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/064a3bb1c3a21e8d230f56e9bccd2026538f0530

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/064a3bb1c3a21e8d230f56e9bccd2026538f0530
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/4b46ac01/attachment.htm>