pdm vulnerabilities (PyPI)

4 vulnerabilities.

• pdm PyPI pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing CVE-2026-47781 Fix available 8.4 HighJune 11, 2026
• pdm PyPI pdm: Path traversal in wheel installation via overridden write_to_fs CVE-2026-47764 Fix available 8.4 HighJune 10, 2026
• pdm PyPI pdm: Project-Local State and Config Writes Follow Symlinks CVE-2026-47763 Fix available 6.8 MediumJune 10, 2026
• pdm PyPI Trojan Lockfilein pdm CVE-2023-45805 Fix available 7.8 HighOctober 20, 2023