A security advisory (CVE-2025-54368) has been issued for uv, the Python package installer, covering two ZIP parsing differentials that could allow an attacker to craft a ZIP file that extracts differently across uv and pip, or appears harmless to security scanners while containing a malicious payload. The two vulnerabilities involve 'dangling files' (local file entries without central directory headers) and 'doubled ZIPs' (ambiguity in whether the central directory offset is absolute or relative). Coordination with the Python Security Response Team and PyPI confirmed no exploitation occurred on PyPI, and PyPI has added upload checks to prevent future abuse. The fix is in uv v0.8.6, which now reconciles local file entries with the central directory and rejects malformed ZIPs. The advisory notes that ZIP format ambiguities make parser differentials a broader ecosystem risk beyond uv alone.
