Skip to main content

Vendor/product archive

anaconda / conda-build CVEs

Beta · best-effort

4 CVEs tagged to anaconda / conda-build0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

CVE-2025-32800

Published Jun 16, 2025

Conda-build contains commands and tools to build conda packages. Prior to version 25.3.0, the pyproject.toml lists conda-index as a Python dependency. This package is not publishe…

CVSS 7.2 · High
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-32799

Published Jun 16, 2025

Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build processing logic is vulnerable to path traversal (Tarslip) attacks due to…

CVSS 5.6 · Medium
evidence mentions
4
Buzz score
21.1
Vendor/product tagsBeta · best-effort

CVE-2025-32798

Published Jun 16, 2025

Conda-build contains commands and tools to build conda packages. Prior to version 25.4.0, the conda-build recipe processing logic has been found to be vulnerable to arbitrary code…

CVSS 8.2 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2025-32797

Published Jun 16, 2025

Conda-build contains commands and tools to build conda packages. Prior to version 25.3.1, the write_build_scripts function in conda-build creates the temporary build script conda_…

CVSS 6.0 · Medium
evidence mentions
4
Buzz score
21.1
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1