pdm-project pdm

• CVE-2026-47781 High 8.4 pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing 0.2%
• CVE-2026-47764 High 8.4 pdm: Path traversal in wheel installation via overridden write_to_fs 0.2%
• CVE-2026-47763 Medium 6.8 pdm: Project-Local State and Config Writes Follow Symlinks 0.2%
• CVE-2023-45805 High 7.8 Trojan Lockfilein pdm 0.5%