Astral-Sh
AI Threat Alert tracks 1 known AI/ML vulnerability affecting Astral-Sh products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Astral-Sh CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| MEDIUM | CVE-2025-13327 | uv: ZIP parsing differential allows code execution | rhaiis-preview/vllm-cuda-rhel9 | 6.3 |
Frequently asked questions
How many known vulnerabilities affect Astral-Sh?
1 AI/ML CVE affecting Astral-Sh products are tracked, sourced from NVD and GitHub Advisory.
What Astral-Sh products are affected?
The CVEs below map to the Astral-Sh AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Astral-Sh vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Astral-Sh for new vulnerabilities?
AI Threat Alert tracks Astral-Sh continuously; a Pro subscription adds breaking alerts when new CVEs affecting Astral-Sh are published.
How do I assess Astral-Sh's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Astral-Sh issues first and judge the exposure for your stack.