Skip to content
OpenAdvisories

Package · PyPI

uv

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-w476-p2h3-79g9

    uv has differential in tar extraction with PAX headers

    ### Impact In versions 0.9.4 and earlier of uv, tar archives containing PAX headers with file size overrides were not handled properly. As a result, an attacker could contrive a source distribution (as a tar archive) that would extract differently when instal…

    uv PyPI