Vendors / conda Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 6
Exploited now conda records in CISA KEV No conda vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Conda is a system-level binary package and environment manager that runs on major operating systems and platforms.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00546 · Published 2026-09-21 · Fixed in 26.5.2 CWE-22
Priority HIGH 71
Conda-build contains commands and tools to build conda packages.
CVSS 4.0 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00831 · Published 2025-06-16 · Fixed in 25.4.0 CWE-94
Priority MEDIUM 58
Conda-build contains commands and tools to build conda packages.
CVSS 4.0 MEDIUM 5.6· Network · No auth · User interaction · EPSS 0.0133 · Published 2025-06-16 · Fixed in 25.4.0 CWE-22
Priority MEDIUM 43
Conda Organization Infrastructure is a centralized location for infrastructure codes.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00325 · Published 2026-10-23 · Fixed in 9c0f23857282ff5cf7a6b3ad6bf0dd6f9974be55 CWE-94
Priority LOW 35
(conda) Constructor is a tool that enables users to create installers for conda package collections.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00128 · Published 2025-11-07 · Fixed in 3.13.0 CWE-289
Priority LOW 35
Conda-build contains commands and tools to build conda packages.
CVSS 4.0 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00646 · Published 2025-06-16 · Fixed in 25.3.0 CWE-1357
Priority LOW 35
Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.002 · Published 2025-12-17 · No fix listed CWE-732
Priority LOW 34
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0033 · Published 2022-03-17 · No fix listed CWE-732
Priority LOW 30
Rattler is a library that provides common functionality used within the conda ecosystem.
CVSS 4.0 MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.00196 · Published 2026-07-21 · Fixed in 0.43.2, 0.24.0 +2 CWE-22
Priority LOW 26
Conda-build contains commands and tools to build conda packages.
CVSS 4.0 MEDIUM 6.0· Local · No auth · No interaction · EPSS 0.00172 · Published 2025-06-16 · Fixed in 25.3.1 CWE-277
Priority LOW 24
Rattler is a library that provides common functionality used within the conda ecosystem.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0033 · Published 2026-09-09 · Fixed in 0.9.0, 0.24.0 CWE-22
Priority LOW 2
(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages.
CVSS 3.1 N/A 0.0· Physical · High privileges · User interaction · EPSS 0.00161 · Published 2025-06-17 · Fixed in 3.11.3 CWE-77
Open these records in search → All records by CVSS severity
1 6 4 0 1
THREATIST.IORead the docs