diff --git a/python-uv.changes b/python-uv.changes
index 4460e42..4a8577f 100644
--- a/python-uv.changes
+++ b/python-uv.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Sep  2 14:56:39 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
+
+- Update vendor tarball to fix CVE-2025-58160 (bsc#1249011) 
+
 -------------------------------------------------------------------
 Thu Aug 28 22:10:39 UTC 2025 - Ondřej Súkup <mimi.vx@gmail.com>
 
diff --git a/python-uv.spec b/python-uv.spec
index e6bdff8..01eaf72 100644
--- a/python-uv.spec
+++ b/python-uv.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-uv
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 1a7a7b8..4ce5acf 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:043f4470ae1f3ff208104a16eda4d7dc411c4b521e047c9726b449d120bcdbfe
-size 59741965
+oid sha256:2197d0f95404da3d62f6d36d5a7df62cb13bc456f4ab2dc8c6976bd29e56746e
+size 59944881