MEDIUMPyPIcrates.io
GHSA-4gg8-gxpx-9rphuv is vulnerable to arbitrary file write through entry point names
Modified: 5/29/2026
package
PyPI/uv
pkg:pypi/uv
MEDIUMPyPI
GHSA-8qf3-x8v5-2pj8· CVE-2025-54368, PYSEC-2026-2001uv allows ZIP payload obfuscation through parsing differentials
Modified: 7/7/2026
LOWPyPI
GHSA-pjjw-68hj-v9mwuv vulnerable to arbitrary file deletion through RECORD entries
Modified: 9/10/2026
MEDIUMPyPI
GHSA-pqhf-p39g-3x64· CVE-2025-13327, GHSA-v653-r55g-hcmguv allows ZIP payload obfuscation through parsing differentials
Modified: 7/13/2026
LOWPyPI
GHSA-w476-p2h3-79g9uv has differential in tar extraction with PAX headers
Modified: 2/4/2026
—PyPI
PYSEC-2026-2001· CVE-2025-54368, GHSA-8qf3-x8v5-2pj8uv allows ZIP payload obfuscation through parsing differentials
Modified: 7/7/2026
MEDIUM6.3PyPI
PYSEC-2026-2295· CVE-2025-13327, GHSA-pqhf-p39g-3x64Modified: 7/13/2026