Conda

11 CVEs across 8 Conda products. Browse Conda vulnerabilities, severities, and proof-of-concept exploits.

Conda products with known CVEs

ProductCVEs
Conda-Build4
Constructor2
Miniconda32
Py-Rattler2
Conda1
Rattler1
Rattler-Build1
Rattler Cache1
Conda CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-53940High8.82026-09-21Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in co…
CVE-2026-53956Medium5.42026-09-09Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to versi…
CVE-2026-474252026-07-21Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types…
CVE-2024-46062High7.82025-12-17Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During instal…
CVE-2025-64343High7.82025-11-07(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory…
CVE-2025-49823Unrated2025-06-17(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to version 3.11.3, shell installer scripts proce…
CVE-2025-32800Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This pac…
CVE-2025-32799Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tar…
CVE-2025-32798Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerab…
CVE-2025-32797High7.02025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.3.1, the write_build_scripts function in conda-build creates the temporary…
CVE-2022-26526High7.82022-03-17Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and pl…