Conda vulnerabilities

Products

• Conda-build 4
• Constructor 4
• Miniconda3 2
• Py-rattler 2

Newest

• conda infrastructure Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN CVE-2026-53942 9.9 CriticalOctober 23, 2026
• conda Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation CVE-2026-53940 Fix available 8.8 HighSeptember 21, 2026
• conda py-rattler, rattler cache +1 more Rattler vulnerable to package cache path traversal via conda package build string CVE-2026-53956 Fix available 5.4 MediumJuly 9, 2026
• anton shevchuk constructor WordPress Constructor theme <= 1.6.5 - Broken Access Control Vulnerability CVE-2025-53302 5.3 MediumJune 2, 2026
• conda py-rattler, rattler, rattler-build +1 more +3 more Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) CVE-2026-47425 Fix available 6.9 MediumJune 1, 2026
• conda miniconda3 Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability... CVE-2024-46062 7.8 HighDecember 17, 2025
• conda constructor (conda) Constructor: Excessive permissions during and after installation CVE-2025-64343 7.8 HighNovember 7, 2025
• antonshevchuk constructor Constructor <= 1.6.5 - Missing Authorization to Authenticated (Subscriber+) Theme Clean CVE-2025-9194 4.3 MediumOctober 3, 2025
• conda constructor Conda Constructor Command Injection via Unsanitized User Input (Low) CVE-2025-49823 0.0 NoneJune 17, 2025
• anaconda conda-build Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI CVE-2025-32800 7.2 HighJune 16, 2025
• anaconda conda-build Conda-build Vulnerable to Path Traversal via Malicious Tar File CVE-2025-32799 5.6 MediumJune 16, 2025
• anaconda conda-build Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors CVE-2025-32798 8.2 HighJune 16, 2025
• anaconda conda-build Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution CVE-2025-32797 6.0 MediumJune 16, 2025
• anaconda anaconda3, conda miniconda3 +1 more Anaconda Anaconda3 through 2021.11.0.0 and Miniconda3 through 11.0.0.0 can create a world... CVE-2022-26526 Fix available 7.8 HighMarch 17, 2022