Read the docs

conda-forge

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

conda-forge records in CISA KEV

No conda-forge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Miniforge 1 record HIGH Openssl-feedstock 1 record HIGH

Records

1 record in Openssl-feedstock · all components

TI-2025-24594 CVE-2025-35471 · GHSA-wv5q-x2gm-xf7j

conda-forge openssl-feedstock writable OPENSSLDIR

Priority HIGH 66

conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00229 Published 2025-05-13 Fixed in 066e83c, 24.5.0 CWE-427
Open these records in search →