Conda

6 CVEs across 6 Conda products. Browse Conda vulnerabilities, severities, and proof-of-concept exploits.

Conda products with known CVEs

ProductCVEs
Conda-Build4
Constructor2
Miniconda32
Py-Rattler1
Rattler1
Rattler-Build1
Conda CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-474252026-07-21Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types…
CVE-2024-46062High7.82025-12-17Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During instal…
CVE-2025-64343High7.82025-11-07(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2 and below, the installation directory…
CVE-2025-49823Unrated2025-06-17(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to version 3.11.3, shell installer scripts proce…
CVE-2025-32800Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This pac…
CVE-2025-32799Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tar…
CVE-2025-32798Critical9.82025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerab…
CVE-2025-32797High7.02025-06-16Conda-build contains commands and tools to build conda packages. Prior to version 25.3.1, the write_build_scripts function in conda-build creates the temporary…
CVE-2022-26526High7.82022-03-17Anaconda Anaconda3 (Anaconda Distribution) through 2021.11.0.0 and Miniconda3 through 4.11.0.0 can create a world-writable directory under %PROGRAMDATA% and pl…