CO
Vendor
conda
9
CVEs
0
On KEV
1
New 30D
Products
IN9.9
infrastructure
conda
1 CVEs0 on KEV1 new
MI7.8
Miniconda3
Conda
2 CVEs0 on KEV0 new
PY6.9
py-rattler
conda
2 CVEs0 on KEV0 new
CO8.8
conda
conda
1 CVEs0 on KEV0 new
RA6.9
rattler
conda
1 CVEs0 on KEV0 new
RA6.9
rattler-build
conda
1 CVEs0 on KEV0 new
RA5.4
rattler_cache
conda
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-53942 New | IN infrastructure conda | 9.9 | Oct 23 | Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN |
| CVE-2026-53940 | CO conda conda | 8.8 | Sep 21 | Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation |
| CVE-2026-53956 | RA rattler_cache conda | 5.4 | Sep 9 | Rattler vulnerable to package cache path traversal via conda package build string |
| CVE-2026-47425 | RA rattler-build conda | 6.9 | Jul 21 | Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) |
| CVE-2024-46062 | MI Miniconda3 Conda | 7.8 | Dec 17 | Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory |
| CVE-2022-26526 | MI Miniconda3 Conda | 7.8 | Mar 17 | Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and place that directory… |