TI-2025-23835 CVE-2025-32798
Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors
Priority HIGH 71
Conda-build contains commands and tools to build conda packages.
Anaconda
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Anaconda records in CISA KEVNo Anaconda vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
Priority MEDIUM 58
Conda-build contains commands and tools to build conda packages.
TI-2023-17920 CVE-2023-35845 · GHSA-hhfv-2xc3-52h6
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by…
Priority MEDIUM 55
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program.
TI-2021-18772 CVE-2021-42343 · GHSA-hwqr-f3v9-hwxr
An issue was discovered in the Dask distributed package before 2021.10.0 for Python.
Priority MEDIUM 47
An issue was discovered in the Dask distributed package before 2021.10.0 for Python.
TI-2021-19057 CVE-2021-42969 · GHSA-p9v4-8gqg-fmcp
Certain Anaconda3 2021.05 are affected by OS command injection.
Priority MEDIUM 42
Certain Anaconda3 2021.05 are affected by OS command injection.
TI-2025-23837 CVE-2025-32800
Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI
Priority LOW 35
Conda-build contains commands and tools to build conda packages.
TI-2024-30876 CVE-2024-46060 · GHSA-q9rq-fh6c-82mw
Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation…
Priority LOW 35
Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.
TI-2022-09864 CVE-2022-26526 · GHSA-4qx4-v2q7-m2gp
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through…
Priority LOW 34
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable.
TI-2025-23834 CVE-2025-32797
Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution
Priority LOW 26
Conda-build contains commands and tools to build conda packages.
TI-2026-18952 CVE-2026-23528 · GHSA-c336-7962-wfj2
Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Priority LOW 24
Dask distributed is a distributed task scheduler for Dask.