PyPI/pdm CVE-2026-47763: medium 6.8, EPSS 0.20%

PDM: Project-Local State and Config Writes Follow Symlinks

Action: Upgrade pdm to 2.27.0 or later.

pip install pdm==2.27.0

Affected

Fixed versions

Sources

• osv: GHSA-ghq2-5c67-fprm
• nvd: CVE-2026-47763
• https://github.com/pdm-project/pdm/security/advisories/GHSA-ghq2-5c67-fprm
• https://github.com/pdm-project/pdm
• https://github.com/pdm-project/pdm/releases/tag/2.27.0

CVE-2026-47763 · published 2026-06-10T20:32:56Z · modified 2026-07-13T16:42:31.635713372Z · JSON