Skip to content

uv allows ZIP payload obfuscation through parsing differentials

Moderate severity GitHub Reviewed Published Oct 29, 2025 in astral-sh/uv • Updated Oct 29, 2025

No open alerts for this advisory

Give feedback on Dependabot alerts