pdm vulnerabilities

1 known vulnerability in pdm from Frostming. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  pdm is a Python package and dependency manager supporting the latest PEP standards.

  CVE-2023-45805Oct 20, 2023Pdm-project

  pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `pdm.lock` file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actual