Vulnerabilities in conda
10 resultsCVE-2025-32799MEDIUMConda-build Vulnerable to Path Traversal via Malicious Tar FileEPSS 1.3%CVE-2025-32798HIGHConda-build Allows Arbitrary Code Execution via Malicious Recipe SelectorsEPSS 0.8%CVE-2025-32800HIGHConda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPIEPSS 0.6%CVE-2026-53940HIGHConda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementationEPSS 0.5%CVE-2026-53956MEDIUMRattler vulnerable to package cache path traversal via conda package build stringEPSS 0.3%CVE-2026-53942CRITICALConda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKENEPSS 0.3%CVE-2026-47425MEDIUMRattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)EPSS 0.2%CVE-2025-32797MEDIUMConda-build Insecure Build Script Permissions Enabling Arbitrary Code ExecutionEPSS 0.2%CVE-2025-49823NONEConda Constructor Command Injection via Unsanitized User Input (Low)EPSS 0.2%CVE-2025-64343HIGH(conda) Constructor: Excessive permissions during and after installationEPSS 0.1%