CVE-2026-114110 - Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries
CVE ID :CVE-2026-114110 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. Attackers can craft a...