uproot vulnerabilities

1 known vulnerability in uproot from Scikit-hep. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  uproot: Improper Control of Generation of Code

  CVE-2026-9147Jul 18, 2026Scikit-hep

  uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source wi