EUVD-2025-208130Published

Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

cve-program · CVE-2025-13327

Published

uv

https://github.com/astral-sh/uv

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "astral-sh",
                    "product": "uv",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "0.9.6",
                            "versionType": "semver"
                        }
                    ],
                    "packageName": "uv",
                    "collectionURL": "https://github.com/astral-sh/uv",
                    "defaultStatus": "unaffected"
                }

rhaiis/vllm-rocm-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server 3.2",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhaiis/vllm-rocm-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793961846",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3.2::el9"
                    ]
                }

rhaiis/model-opt-cuda-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server 3.2",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhaiis/model-opt-cuda-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793962303",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3.2::el9"
                    ]
                }

rhaiis/vllm-cuda-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server 3.2",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhaiis/vllm-cuda-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793961309",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3.2::el9"
                    ]
                }

rhai/base-image-rocm-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.0",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-rocm-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793041981",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.0::el9"
                    ]
                }

rhai/base-image-cpu-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.0",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-cpu-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793042072",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.0::el9"
                    ]
                }

rhai/base-image-cuda-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.0",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-cuda-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793042067",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.0::el9"
                    ]
                }

rhai/base-image-cpu-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.0",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-cpu-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793329709",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.0::el9"
                    ]
                }

rhai/base-image-cuda-rhel9

https://catalog.redhat.com/software/containers/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.0",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhai/base-image-cuda-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1793328358",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.0::el9"
                    ]
                }

rhai/base-image-cpu-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhai/base-image-cpu-rhel9",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3"
                    ]
                }

rhai/base-image-cuda-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhai/base-image-cuda-rhel9",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3"
                    ]
                }

rhai/base-image-rocm-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhai/base-image-rocm-rhel9",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3"
                    ]
                }

rhaiis-preview/vllm-cuda-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat AI Inference Server",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhaiis-preview/vllm-cuda-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:ai_inference_server:3"
                    ]
                }

rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-training-rocm64-torch28-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-training-rocm64-torch28-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-vllm-cpu-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-vllm-cpu-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9

https://access.redhat.com/downloads/content/package-browser/

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI (RHOAI)",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2025-208130

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Feb 27, 2026, 7:30:20 AM

dateUpdated: Nov 13, 2026, 1:03:37 PM

9 related source bulletins · separate from aliases

RHSA-2026:94476: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CUDA)

CVE-2025-8869 · CVE-2025-13327 · CVE-2025-69418 · CVE-2026-1703 · CVE-2026-3219 · CVE-2026-6357 · CVE-2026-6653 · CVE-2026-11979 · CVE-2026-13346 · CVE-2026-28390 · CVE-2026-31790 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-45445 · CVE-2026-45447 · CVE-2026-74860 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144 · CVE-2026-86145 · CVE-2026-89161 · CVE-2026-96889 · CVE-2026-103111 · CVE-2026-111497 · CVE-2026-114109 · CVE-2026-114110 · CVE-2026-114406

RHSA-2026:91219: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (ROCm)

CVE-2025-8869 · CVE-2025-13327 · CVE-2025-69418 · CVE-2026-1703 · CVE-2026-3219 · CVE-2026-6357 · CVE-2026-6653 · CVE-2026-8643 · CVE-2026-11979 · CVE-2026-13346 · CVE-2026-28390 · CVE-2026-31790 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-45445 · CVE-2026-45447 · CVE-2026-74860 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144 · CVE-2026-86145 · CVE-2026-89161 · CVE-2026-96512 · CVE-2026-103111 · CVE-2026-114109 · CVE-2026-114110 · CVE-2026-114406

RHSA-2026:94459: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CPU)

CVE-2025-8869 · CVE-2025-13327 · CVE-2025-69418 · CVE-2026-1703 · CVE-2026-6653 · CVE-2026-11979 · CVE-2026-13346 · CVE-2026-28390 · CVE-2026-31790 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-45445 · CVE-2026-45447 · CVE-2026-74860 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144 · CVE-2026-86145 · CVE-2026-89161 · CVE-2026-96889 · CVE-2026-103111 · CVE-2026-111497 · CVE-2026-114406

RHSA-2026:96400: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm)

CVE-2025-13327 · CVE-2026-66007 · CVE-2026-93592 · CVE-2026-96636 · CVE-2026-96637 · CVE-2026-96638 · CVE-2026-96639 · CVE-2026-96640 · CVE-2026-96641 · CVE-2026-96642 · CVE-2026-96643 · CVE-2026-96644 · CVE-2026-96778 · CVE-2026-97687 · CVE-2026-97688 · CVE-2026-97689 · CVE-2026-104851 · CVE-2026-111063 · CVE-2026-111064 · CVE-2026-111065 · CVE-2026-111066 · CVE-2026-111748 · CVE-2026-111750 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112394 · CVE-2026-112395 · CVE-2026-112396 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112401 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112891 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-112898 · CVE-2026-112899 · CVE-2026-112900 · CVE-2026-112901 · CVE-2026-112902 · CVE-2026-114109 · CVE-2026-114406 · CVE-2026-114501

RHSA-2026:91232: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (CPU)

CVE-2025-8869 · CVE-2025-13327 · CVE-2025-69418 · CVE-2026-1703 · CVE-2026-6653 · CVE-2026-8643 · CVE-2026-11979 · CVE-2026-13346 · CVE-2026-28390 · CVE-2026-31790 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-45445 · CVE-2026-45447 · CVE-2026-55653 · CVE-2026-55655 · CVE-2026-59995 · CVE-2026-59996 · CVE-2026-59999 · CVE-2026-60001 · CVE-2026-74860 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144 · CVE-2026-86145 · CVE-2026-89161 · CVE-2026-103111 · CVE-2026-114406

RHSA-2026:96406: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

CVE-2025-13327 · CVE-2026-54399 · CVE-2026-93592 · CVE-2026-96636 · CVE-2026-96637 · CVE-2026-96638 · CVE-2026-96639 · CVE-2026-96640 · CVE-2026-96641 · CVE-2026-96642 · CVE-2026-96643 · CVE-2026-96644 · CVE-2026-96778 · CVE-2026-97687 · CVE-2026-97688 · CVE-2026-97689 · CVE-2026-104851 · CVE-2026-104874 · CVE-2026-111063 · CVE-2026-111064 · CVE-2026-111065 · CVE-2026-111066 · CVE-2026-111748 · CVE-2026-111750 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112394 · CVE-2026-112395 · CVE-2026-112396 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112401 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112891 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-112898 · CVE-2026-112899 · CVE-2026-112900 · CVE-2026-112901 · CVE-2026-112902 · CVE-2026-114109 · CVE-2026-114406 · CVE-2026-114501

RHSA-2026:96403: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)

CVE-2025-13327 · CVE-2026-45409 · CVE-2026-66007 · CVE-2026-96636 · CVE-2026-96637 · CVE-2026-96638 · CVE-2026-96639 · CVE-2026-96640 · CVE-2026-96641 · CVE-2026-96642 · CVE-2026-96643 · CVE-2026-96644 · CVE-2026-96778 · CVE-2026-97687 · CVE-2026-97688 · CVE-2026-97689 · CVE-2026-104851 · CVE-2026-111063 · CVE-2026-111064 · CVE-2026-111065 · CVE-2026-111066 · CVE-2026-111748 · CVE-2026-111750 · CVE-2026-112390 · CVE-2026-112391 · CVE-2026-112392 · CVE-2026-112393 · CVE-2026-112394 · CVE-2026-112395 · CVE-2026-112396 · CVE-2026-112397 · CVE-2026-112398 · CVE-2026-112399 · CVE-2026-112400 · CVE-2026-112401 · CVE-2026-112402 · CVE-2026-112403 · CVE-2026-112404 · CVE-2026-112405 · CVE-2026-112406 · CVE-2026-112891 · CVE-2026-112892 · CVE-2026-112893 · CVE-2026-112894 · CVE-2026-112895 · CVE-2026-112896 · CVE-2026-112897 · CVE-2026-112898 · CVE-2026-112899 · CVE-2026-112900 · CVE-2026-112901 · CVE-2026-112902 · CVE-2026-114109 · CVE-2026-114406 · CVE-2026-114501

openSUSE-SU-2026:20330-1: Security update for python-uv

CVE-2025-13327

RHSA-2026:91236: Red Hat Security Advisory: Red Hat AI Base Images 3.0.7 (CUDA)

CVE-2025-8869 · CVE-2025-13327 · CVE-2025-69418 · CVE-2026-1703 · CVE-2026-3219 · CVE-2026-6357 · CVE-2026-6653 · CVE-2026-8643 · CVE-2026-11979 · CVE-2026-13346 · CVE-2026-28390 · CVE-2026-31790 · CVE-2026-34182 · CVE-2026-34183 · CVE-2026-45445 · CVE-2026-45447 · CVE-2026-74860 · CVE-2026-86138 · CVE-2026-86140 · CVE-2026-86142 · CVE-2026-86143 · CVE-2026-86144 · CVE-2026-86145 · CVE-2026-89161 · CVE-2026-103111 · CVE-2026-114109 · CVE-2026-114110 · CVE-2026-114406

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2025-13327

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Modified

Weakness classifications: CWE-1286 · NVD-CWE-noinfo

Original publisher date fields

published: 2026-02-27T08:17:04.043

lastModified: 2026-11-13T13:17:37.613

1 source CPE criteria · context only

cpe:2.3:a:astral:uv:*:*:*:*:*:python:*:*

The original JSON retains the logical configuration operators, exclusions and version bounds.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-v653-r55g-hcmg

Published

uv

crates.io

SEMVER · introduced 0 → fixed 0.9.6

Original source record · Cite this exact observation · Complete original publisher JSON