pdm-project

Products

ProductCVEsExploitedLatest
pdm4–Aug 4, 2026

Exploited and recent CVEs

  • CVE-2026-47781 High 8.4 pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing 0.2%
  • CVE-2026-47764 High 8.4 pdm: Path traversal in wheel installation via overridden write_to_fs 0.2%
  • CVE-2026-47763 Medium 6.8 pdm: Project-Local State and Config Writes Follow Symlinks 0.2%
  • CVE-2023-45805 High 7.8 Trojan Lockfilein pdm 0.5%