CO
Product
conda-build
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 0Low 0
Watch
Add conda-build to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-32800 | 9.8 | Jun 16 | Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI Affected: < 25.3.0 |
| CVE-2025-32799 | 9.8 | Jun 16 | Conda-build Vulnerable to Path Traversal via Malicious Tar File Affected: < 25.4.0 |
| CVE-2025-32798 | 9.8 | Jun 16 | Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors Affected: < 25.4.0 |
| CVE-2025-32797 | 7.0 | Jun 16 | Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution Affected: < 25.3.1 |
Showing 4