Tag
A Local Privilege Escalation vulnerability in adm-zip allows crafted ZIP files to set SUID/SGID bits, enabling root access for local users when extracted as root. The issue has been patched in version 0.6.1.
uv's ZIP extraction has been optimized by moving it to a single blocking task with synchronous filesystem operations, inspired by code from Bun, leading to faster installation of packages like Jupyter from PyPI.