Vendor
Conda
12 known vulnerabilities in products by Conda, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-32799 | Conda-build Vulnerable to Path Traversal via Malicious Tar File | 9.8 | |
| High | CVE-2026-53940 | Conda: Path Traversal | 8.8 | |
| Critical | CVE-2025-32798 | Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors | 9.8 | |
| Critical | CVE-2026-53942 | Conda Infrastructure: Code Injection | 9.9 | |
| Critical | CVE-2025-32800 | Conda-build: Reliance on Insufficiently Trustworthy Component | 9.8 | |
| Medium | CVE-2026-53956 | Rattler vulnerable to package cache path traversal via conda package build string | 5.4 | |
| Medium | CVE-2026-47425 | Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) | — | |
| High | CVE-2024-46062 | Conda Miniconda3: Command Injection | 7.8 | |
| High | CVE-2025-64343 | (conda) Constructor: Excessive permissions during and after installation | 7.8 | |
| High | CVE-2022-26526 | Anaconda3: Privilege Escalation | 7.8 | |
| High | CVE-2025-32797 | Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution | 7.0 | |
| Not rated | CVE-2025-49823 | Conda Constructor Command Injection via Unsanitized User Input (Low) | — |
Products
| Conda-build | 4 | 0 |