CVE-2025-71437 | astral-sh uv up to 0.8.21 Tar Extraction path traversal

October 21, 2026 Yanac

A vulnerability identified as problematic has been detected in astral-sh uv up to 0.8.21. Affected is an unknown function of the component Tar Extraction. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2025-71437. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More