AN
Vendor
Anaconda
10
CVEs
0
On KEV
0
New 30D
Products
AN8.8
Anaconda3
Anaconda
4 CVEs0 on KEV0 new
CO9.8
Conda-build
Anaconda
4 CVEs0 on KEV0 new
DA9.8
Dask
Anaconda
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-23528 | DA Dask Anaconda | 6.1 | Jan 16 | Dask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard |
| CVE-2024-46060 | AN Anaconda3 Anaconda | 7.8 | Dec 17 | Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory |
| CVE-2025-32800 | CO Conda-build Anaconda | 9.8 | Jun 16 | Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI |
| CVE-2025-32799 | CO Conda-build Anaconda | 9.8 | Jun 16 | Conda-build Vulnerable to Path Traversal via Malicious Tar File |
| CVE-2025-32798 | CO Conda-build Anaconda | 9.8 | Jun 16 | Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors |
| CVE-2025-32797 | CO Conda-build Anaconda | 7.0 | Jun 16 | Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution |
| CVE-2023-35845 | AN Anaconda3 Anaconda | 4.7 | Sep 11 | Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program |
| CVE-2021-42969 | AN Anaconda3 Anaconda | 8.8 | May 13 | Certain Anaconda3 2021.05 are affected by OS command injection |
| CVE-2022-26526 | AN Anaconda3 Anaconda | 7.8 | Mar 17 | Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory… |
| CVE-2021-42343 | DA Dask Anaconda | 9.8 | Oct 26 | An issue was discovered in the Dask distributed package before 2021.10.0 for Python |