mediumCVSS 4CVE-2025-13327Fixed
uv allows ZIP payload obfuscation through parsing differentials
### Impact
In versions 0.9.5 and earlier of uv, ZIP archives were handled in a manner that enabled two parsing differentials against other components of the Python packaging ecosystem:
1. Central directory entries in a ZIP archive can contain comment fields. However, uv would assume that these fields were not present, since they aren't widely used. Consequently, a ZIP archive could be constructed where uv would interpret the contents of a central directory comment field as ZIP control structur
Affected: >= 0Fixed in 0.9.6Published Oct 29, 2025source \u2192 infoGHSA-w476-p2h3-79g9Fixed
uv has differential in tar extraction with PAX headers
### Impact
In versions 0.9.4 and earlier of uv, tar archives containing PAX headers with file size overrides were not handled properly. As a result, an attacker could contrive a source distribution (as a tar archive) that would extract differently when installed via uv versus other Python package installers.
The underlying parsing differential here originates with astral-tokio-tar, which disclosed this vulnerability as CVE-2025-62518.
In practice, the impact of this vulnerability is **low**:
Affected: >= 0Fixed in 0.9.5Published Oct 21, 2025source \u2192 mediumCVSS 4CVE-2025-54368Fixed
uv allows ZIP payload obfuscation through parsing differentials
## Impact
In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers:
1. An attacker could contrive a ZIP archive that would extract with legitimate contents on some package installers, and malicious contents on others due to multiple local file entries. The attacker could choose which installer to target
Affected: >= 0Fixed in 0.8.6Published Aug 7, 2025source \u2192 