Known Vulnerabilities for Wheel by Pypa
Listed below are 10 of the newest known vulnerabilities associated with "Wheel" by "Pypa".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114110 json | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying ... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114109 json | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts dir... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-113714 json | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-ind... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111750 json | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accep... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-106031 json | The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before retu... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-104843 json | uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can pro... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-102930 json | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and se... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-98707 json | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA session timer on teardow... | Not Provided | 2026-10-18 | 2026-10-21 |
| CVE-2026-98317 json | In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_... | Not Provided | 2026-10-06 | 2026-10-19 |
| CVE-2026-98286 json | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: use timer_shutdown_sync() to prevent timer... | Not Provided | 2026-10-06 | 2026-10-19 |