Vulnerabilities

TI-2026-35274 CVE-2026-47781 · GHSA-qq6c-99pv-prvf

pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing

HIGH 78

PDM is a Python package and dependency manager.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00187 Published 2026-08-04 Fixed in 2.27.0 CWE-829

TI-2026-35261 CVE-2026-47764 · GHSA-78v8-vpjp-cjqh

MEDIUM 44

pdm is a Python package and dependency manager supporting the latest PEP standards.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00197 Published 2026-08-04 Fixed in 2.27.0 CWE-22

TI-2026-35260 CVE-2026-47763 · GHSA-ghq2-5c67-fprm

MEDIUM 63

pdm is a Python package and dependency manager supporting the latest PEP standards.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00197 Published 2026-08-04 Fixed in 2.27.0 CWE-61