Live › vulnerability › CVE-2025-71437
Go to dashboardAstral uv before 0.8.22 extracts source distribution tar files without blocking crafted symlink chains, so a malicious sdist can redirect writes outside the extraction prefix. An attacker who publishes a bad package gets arbitrary file writes on the machine of anyone who installs it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Run uv --version and check whether the version is below 0.8.22.
Upgrade uv to 0.8.22 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file writes outside the intended extraction prefix. Attackers can publish a malicious sdist that, when installed by a victim, writes arbitrary files to filesystem locations outside the installation prefix.
This page as .md · .json · in your agent: get_signal("CVE-2025-71437")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.