Priority MEDIUM 43
Conda Organization Infrastructure is a centralized location for infrastructure codes.
Vulnerabilities
12 records
TI-2026-38909 CVE-2026-53940
Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation
Priority HIGH 73
Conda is a system-level binary package and environment manager that runs on major operating systems and platforms.
TI-2026-38923 CVE-2026-53956 · GHSA-h672-p7h7-97v9
Rattler vulnerable to package cache path traversal via conda package build string
Priority LOW 24
Rattler is a library that provides common functionality used within the conda ecosystem.
TI-2026-34988 CVE-2026-47425 · GHSA-q53q-5r4j-5729
Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)
Priority LOW 30
Rattler is a library that provides common functionality used within the conda ecosystem.
TI-2024-30877 CVE-2024-46062 · GHSA-jqqw-5c3x-2cjx
Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation…
Priority LOW 35
Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory.
TI-2025-39776 CVE-2025-64343
(conda) Constructor: Excessive permissions during and after installation
Priority LOW 35
(conda) Constructor is a tool that enables users to create installers for conda package collections.
Priority LOW 2
(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages.
TI-2025-23837 CVE-2025-32800
Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI
Priority LOW 35
Conda-build contains commands and tools to build conda packages.
Priority MEDIUM 58
Conda-build contains commands and tools to build conda packages.
TI-2025-23835 CVE-2025-32798
Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors
Priority HIGH 71
Conda-build contains commands and tools to build conda packages.
TI-2025-23834 CVE-2025-32797
Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution
Priority LOW 26
Conda-build contains commands and tools to build conda packages.
TI-2022-09864 CVE-2022-26526 · GHSA-4qx4-v2q7-m2gp
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through…
Priority LOW 34
Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory into the system PATH environment variable.