Advisories · Technology
conda-build.
Every CVE that names conda-build among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI
- conda-build
- CWE-1357
- CVSS 5.6 Medium
Conda-build Vulnerable to Path Traversal via Malicious Tar File
- conda-build
- Path traversal
- CVSS 8.2 High
Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors
- conda-build
- Code injection
- CVSS 6.0 Medium
Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution
- conda-build
- CWE-277