Pdm-project Pdm
4 CVEs affecting Pdm-project Pdm. Latest disclosed: 2026-08-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45805 | High | 7.8 | 2023-10-20 | pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `pdm.lock` file that could allow e.g. an… |
CVE-2026-47781 | | 2026-08-04 | PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins direc… | |
CVE-2026-47764 | | 2026-08-04 | pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through write_to_… | |
CVE-2026-47763 | | 2026-08-04 | pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or conf… |