{"action":"Upgrade uv to 0.11.6 or later.","affected":[{"fixed":"0.11.6","introduced":"0"}],"component":"uv","cve_ids":["CVE-2026-114110"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.11.6"],"ghsa_id":"GHSA-pjjw-68hj-v9mw","id":"tcs_01M5JKSK8WMM1Y3Q0PEM697D4E","modified_at":"2026-10-21T10:57:29.084430662Z","published_at":"2026-04-10T19:39:15Z","references":["https://osv.dev/vulnerability/GHSA-pjjw-68hj-v9mw","https://github.com/astral-sh/uv/security/advisories/GHSA-pjjw-68hj-v9mw","https://github.com/astral-sh/uv/pull/18942","https://github.com/astral-sh/uv/pull/18943","https://github.com/astral-sh/uv/commit/7983c7a5bef236fd8a04580fcedae7bd5bde4cdb","https://github.com/astral-sh/uv/commit/a0e461ac44851f9a0f6e8974733e77d46f7a9ea9","https://github.com/astral-sh/uv","https://github.com/astral-sh/uv/releases/tag/0.11.6"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pjjw-68hj-v9mw","url":"https://osv.dev/vulnerability/GHSA-pjjw-68hj-v9mw"},{"source":"nvd","source_id":"CVE-2026-114110","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114110"}],"summary":"uv vulnerable to arbitrary file deletion through RECORD entries"}