Junglewise Threat Intelligence

CVE-2023-45805: PYSEC-2026-1763 - PDM Trojan Lockfile

CVE-2023-45805 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: pdm (PyPI). Vendors: PyPI.

Executive brief

PDM Trojan Lockfile

Affected products

PyPI pdm

Related threats

PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a
pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversa
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project