Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-004556

sonatype-2025-004556

uv - Type Confusion

Published Nov 11, 2025

https://github.com/astral-sh/uv/releases/tag/0.9.5 https://github.com/astral-sh/uv/security/advisories/GHSA-w476-p2h3-79g9

CVSS ScoreMedium

6.9

Ecosystem	Package	Version


pypi	auto-graph-of-thoughts	0.4.0
pypi	auto-graph-of-thoughts	1.0.0
pypi	auto-graph-of-thoughts	1.1.0
pypi	commonpower	0.6.1
pypi	commonpower	0.6.2
pypi	compress-mail	1.0.5
pypi	fusionbrain-sdk-python	0.1.0
pypi	simple-git-versioning	0.3.0
pypi	simple-git-versioning	0.3.1
pypi	simple-git-versioning	0.3.2
pypi	simple-git-versioning	0.3.5
pypi	toolforge-i18n	0.0.2
pypi	uv	0.0.2.dev0
pypi	uv	0.0.2.dev1
pypi	uv	0.0.3.dev0
pypi	uv	0.0.3.dev1
pypi	uv	0.0.4
pypi	uv	0.0.5
pypi	uv	0.1.0
pypi	uv	0.1.10
pypi	uv	0.1.11
pypi	uv	0.1.12
pypi	uv	0.1.13
pypi	uv	0.1.14
pypi	uv	0.1.15
pypi	uv	0.1.16
pypi	uv	0.1.17
pypi	uv	0.1.18
pypi	uv	0.1.19
pypi	uv	0.1.1
pypi	uv	0.1.20
pypi	uv	0.1.21
pypi	uv	0.1.22
pypi	uv	0.1.23
pypi	uv	0.1.24
pypi	uv	0.1.25
pypi	uv	0.1.26
pypi	uv	0.1.27
pypi	uv	0.1.28
pypi	uv	0.1.29
pypi	uv	0.1.2
pypi	uv	0.1.30
pypi	uv	0.1.31
pypi	uv	0.1.32
pypi	uv	0.1.33
pypi	uv	0.1.34
pypi	uv	0.1.35
pypi	uv	0.1.36
pypi	uv	0.1.37
pypi	uv	0.1.38

sonatype-2025-004556 | Components Impacted | Sonatype Guide | Sonatype Guide