CVE-2025-13327
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials
A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP (Zipped Information Package) archives that exploit parsing differentials, requiring user interaction to install an attacker-controlled package.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
uv
- Vendor
- astral-sh
- Product
- uv
- Platforms
- Unknown
- Default status
unaffected- Package
- uv
- Package collection
- https://github.com/astral-sh/uv
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | semver | 0.9.6 | Unavailable | None listed |
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
unaffected- Package
- rhai/base-image-cpu-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
unaffected- Package
- rhai/base-image-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
unaffected- Package
- rhai/base-image-rocm-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/model-opt-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis-preview/vllm-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/vllm-cuda-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat AI Inference Server
- Vendor
- Red Hat
- Product
- Red Hat AI Inference Server
- Platforms
- Unknown
- Default status
affected- Package
- rhaiis/vllm-rocm-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-training-rocm64-torch28-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-vllm-cpu-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.