Frostming vulnerabilities
We track 2 vulnerabilities in Frostming products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Frostming vulnerabilities
- 8.1 High severity
unearth: Improper Limitation of a Pathname to a Restricted Directory
unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply ma
- 7.8 High severity
pdm is a Python package and dependency manager supporting the latest PEP standards.
pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `pdm.lock` file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actual