Executive brief
uv allows ZIP payload obfuscation through parsing differentials
Affected products
- PyPI uv
Junglewise Threat Intelligence
CVE-2025-54368: PYSEC-2026-2001 - uv allows ZIP payload obfuscation through parsing differentials
CVE-2025-54368 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: uv (PyPI). Vendors: PyPI.