HIGHPyPI
GHSA-78v8-vpjp-cjqh· CVE-2026-47764, PYSEC-2026-2861PDM wheel installation leads to Path Traversal via overridden write_to_fs
Modified: 7/13/2026
package
pkg:pypi/pdm
PDM wheel installation leads to Path Traversal via overridden write_to_fs
Modified: 7/13/2026
PDM: Project-Local State and Config Writes Follow Symlinks
Modified: 7/13/2026
PDM Trojan Lockfile
Modified: 7/7/2026
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
Modified: 7/13/2026
PDM Trojan Lockfile
Modified: 7/7/2026
PDM wheel installation leads to Path Traversal via overridden write_to_fs
Modified: 7/13/2026
PDM: Project-Local State and Config Writes Follow Symlinks
Modified: 7/13/2026
PDM: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
Modified: 7/13/2026