Skip to content
Heist/ feed
UnratedFix available

uv 0.13.4

Type: patchSource: uv1 source record

uv 0.13.4 addresses a security issue involving a compromised intermediate certificate in the Web PKI and updates bundled Mozilla root certificates.

Announced Group revision 1
Original source ↗

github-astral-sh-uv

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

This release addresses GHSA-hq85-5cpj-mr62, which involves a root CA whose intermediate on the Web PKI have been compromised.

uv

Release notes from uv
Affected versions
Not stated in this extraction
Fixed versions
0.13.4
0.13.4 Release Notes Released on 2026-10-20.
Prerequisites
Not stated in this extraction

Publisher severity

No explicit severity was extracted.

Event
#78793 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement