Priority LOW 20
conda-forge is a GitHub organization containing repositories of conda recipes.
Vulnerabilities
10 records
Priority LOW 33
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository.
Priority LOW 9
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository.
Priority LOW 21
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository.
TI-2025-31757 CVE-2025-49842
conda-forge-webservices Privilege Escalation Risk via Default Docker Root User
Priority LOW 6
conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.
TI-2025-31611 CVE-2025-49598
conda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing
Priority MEDIUM 56
conda-forge-ci-setup is a package installed by conda-forge each time a build is run on CI.
TI-2025-24594 CVE-2025-35471 · GHSA-wv5q-x2gm-xf7j
conda-forge openssl-feedstock writable OPENSSLDIR
Priority HIGH 66
conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users.
TI-2025-23821 CVE-2025-32784
conda-forge-webservices has an Unauthorized Artifact Modification Race Condition
Priority LOW 34
conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.
TI-2025-22665 CVE-2025-31484
conda-forge infrastructure uses a bad token for Azure's cf-staging access
Priority MEDIUM 48
conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure.
TI-2025-20342 CVE-2025-27510
RCE in the package conda-forge-metadata
Priority HIGH 81
conda-forge-metadata provides programatic access to conda-forge's metadata.