Threats Tagged 'cve-2026-47764'
View all threats tagged with 'cve-2026-47764'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-47764'
Click on any threat for detailed analysis and mitigation recommendations
0 A path traversal vulnerability exists in pdm versions prior to 2.27.0 in the write_to_fs function. This flaw allows a malicious wheel to write arbitrary files by bypassing path validation due to improper pathname limitation. The issue is fixed in version 2.27.0. Join the discussion | CVE Database V5 | 08/04/2026, 17:57:15 UTC Added: 08/04/2026, 18:34:00 UTC |
CVE-2026-47763 is a medium severity vulnerability in the Python package manager pdm prior to version 2.27.0. It allows an attacker to exploit symbolic link (symlink) following when pdm writes project-local state or configuration files without symlink protection. This can lead to arbitrary file overwrite relative to the privileges of the user running pdm. The issue affects files such as pdm.toml, .pdm-python, and .python-version. The vulnerability has been fixed in pdm version 2.27.0. Join the discussion | CVE Database V5 | 08/04/2026, 17:29:41 UTC Added: 08/04/2026, 17:57:22 UTC |
0 This security update for python-pdm addresses multiple vulnerabilities including improper handling of symlinks when writing configuration files, writing to unauthorized paths outside the scheme directory, and incorrect plugin installation paths. These issues have been fixed to prevent potential unauthorized file system modifications. Join the discussion | GCVE Database | 06/26/2026, 07:50:46 UTC Added: 09/17/2026, 01:59:17 UTC |
Showing 1 to 3 of 3 results