Vulnerability in Pdm-project Pdm

CVE-2026-47763

pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places tho…

Affected products

Weakness classification (CWE)

References