VDB
CVE-2025-13327
CVE-2025-13327
PUBLISHED
CVSS 6.300000190734863 MEDIUM
uv has ZIP payload obfuscation through parsing differentials
EPSS 0.15% · 4.5th percentile
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.15%
4.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat AI Inference Server | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat AI Inference Server | |
| Red Hat | Red Hat AI Inference Server | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat AI Inference Server | |
| Red Hat | Red Hat AI Inference Server | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| astral | uv | 0, 0, 0 |
| crates.io | uv | 0, 0, 0 |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) |
…and 10 more
Timeline
- Oct 29, 2025 CVE Published
- Feb 27, 2026 EPSS Score
- Feb 27, 2026 PoC Published
- Mar 1, 2026 CVE Updated
- Mar 1, 2026 EPSS Score
- Mar 2, 2026 EPSS Score
- Mar 4, 2026 EPSS Score
- Mar 5, 2026 EPSS Score
- Mar 7, 2026 EPSS Score
- Mar 8, 2026 EPSS Score
- Mar 10, 2026 EPSS Score
- Mar 11, 2026 EPSS Score
References
- https://access.redhat.com/security/cve/CVE-2025-13327 vdb
- RHBZ#2407263 issue
- https://github.com/astral-sh/uv/commit/da659fee4898a73dbc75070f3e82d49f745e4628 url
- https://github.com/astral-sh/uv url
- https://github.com/astral-sh/uv/security/advisories/GHSA-pqhf-p39g-3x64 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-13327 advisory