Vendors / Anaconda Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 5
Exploited now Anaconda records in CISA KEV No Anaconda vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program.
CVSS 3.1 MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00121 · Published 2023-09-11 · No fix listed CWE-295
Priority MEDIUM 42
Certain Anaconda3 2021.05 are affected by OS command injection.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01909 · Published 2022-05-13 · No fix listed CWE-78
Priority LOW 35
Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2025-12-17 · No fix listed CWE-732
Priority LOW 34
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2022-03-17 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
1 5 4 0 0
THREATIST.IORead the docs