Debian/pdm: high 7.8
pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `pdm.lock` file that could allow e.g. an insider or a malicious open source proje
Action: Upgrade pdm to 2.20.0.post1+ds1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0.post1+ds1-1 | - |
Fixed versions
| 2.20.0.post1+ds1-1 |
Sources
published · modified · JSON