VULNRABLE / Vulnerability / GHSA-hq85-5cpj-mr62
GHSA-hq85-5cpj-mr62
CRITICAL WATCH uv GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
What this means
GHSA-hq85-5cpj-mr62 is a critical-severity vulnerability affecting uv, rated CVSS 9.5. Published October 20, 2026.
View full advisory at GHSA →