Skip to content
OpenAdvisories

Vendor

pdm-project

4 known vulnerabilities.

Products

pdm 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-47763

    pdm: Project-Local State and Config Writes Follow Symlinks

    pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks…

    pdm-project pdm pdm pdm Debian Ubuntu PyPI