Known Vulnerabilities for Wheels CLI by Wheels
Listed below are 10 of the newest known vulnerabilities associated with "Wheels CLI" by "Wheels".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114110 json | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114109 json | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts dir... | Not Provided | 2026-10-21 | 2026-10-28 |
| CVE-2026-111451 json | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy releas... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111450 json | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the a... | Not Provided | 2026-10-16 | 2026-10-19 |
| CVE-2026-111449 json | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allow... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111448 json | Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canoni... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111447 json | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the p... | Not Provided | 2026-10-16 | 2026-10-21 |
| CVE-2026-111446 json | Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicCompone... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111445 json | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and ex... | Not Provided | 2026-10-16 | 2026-10-19 |
| CVE-2026-111444 json | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when... | Not Provided | 2026-10-16 | 2026-10-16 |