PyPI: uv
CVE-2025-54368
Safety vulnerability ID: SFTY-20250807-36047
Safety legacy ID: pyup.io-79083
Affected versions of the uv package are vulnerable to Improper Input Validation due to inadequate verification of ZIP central directory data and End-of-Central-Directory offsets in the streaming extractor. The vulnerable path is uv’s asynchronous ZIP parser (rs-async-zip) used by the wheel installation modules (uv-extract and uv-install-wheel), which trusts local file headers, permits duplicate or missing central-directory entries, and interprets the EOCD offset in a way that causes divergent extraction behaviour across installers.
Overview
uv allows ZIP payload obfuscation through parsing differentials
Advisory
Affected versions of the uv package are vulnerable to Improper Input Validation due to inadequate verification of ZIP central directory data and End-of-Central-Directory offsets in the streaming extractor. The vulnerable path is uv’s asynchronous ZIP parser (rs-async-zip) used by the wheel installation modules (uv-extract and uv-install-wheel), which trusts local file headers, permits duplicate or missing central-directory entries, and interprets the EOCD offset in a way that causes divergent extraction behaviour across installers.
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20250807-36047/CVE-2025-54368
- https://github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8
- https://github.com/astral-sh/uv/commit/7f1eaf48c193e045ca2c62c4581048765c55505f
- https://astral.sh/blog/uv-security-advisory-cve-2025-54368
- https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks
- https://nvd.nist.gov/vuln/detail/CVE-2025-54368
- https://github.com/advisories/GHSA-8qf3-x8v5-2pj8
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more