Cconda

Products

Exploited and recent CVEs

• CVE-2026-53942 Critical 9.9 Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN 0.3%
• CVE-2026-53940 High 8.8 Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation 0.5%
• CVE-2026-53956 Medium 5.4 Rattler vulnerable to package cache path traversal via conda package build string 0.3%
• CVE-2026-53956 Medium 5.4 Rattler vulnerable to package cache path traversal via conda package build string 0.3%
• CVE-2026-47425 Medium 6.9 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) 0.2%
• CVE-2026-47425 Medium 6.9 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) 0.2%
• CVE-2026-47425 Medium 6.9 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) 0.2%
• CVE-2025-64343 High 7.8 (conda) Constructor: Excessive permissions during and after installation 0.1%
• CVE-2025-49823 None 0.0 Conda Constructor Command Injection via Unsanitized User Input (Low) 0.2%
• CVE-2025-32800 High 7.2 Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI 0.6%
• CVE-2025-32799 Medium 5.6 Conda-build Vulnerable to Path Traversal via Malicious Tar File 1.3%
• CVE-2025-32798 High 8.2 Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors 0.8%
• CVE-2025-32797 Medium 6.0 Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution 0.2%