PT-2026-48601

InstallDestination.write to fs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces the safe path with destdir which validates via Path.resolve + is relative to with a bare os.path.join that performs no path validation. A malicious wheel with...