Description
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a victim, writes arbitrary files to filesystem locations outside the installation prefix.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| astral-sh | uv | ≤ 0.8.21 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | uv | No fix yet | — |
References
- GitHub Security Advisory (GHSA-7j9j-68r2-f35q) vendor-advisory
- VulnCheck Advisory: Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extraction third-party-advisory