<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: conda-build</title><description>Every new CVE for conda-build.</description><link>https://agentprime.io/</link><item><title>CVE-2025-32800: Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI</title><link>https://agentprime.io/advisories/CVE-2025-32800/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32800/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jun 2025 20:38:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32799: Conda-build Vulnerable to Path Traversal via Malicious Tar File</title><link>https://agentprime.io/advisories/CVE-2025-32799/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32799/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jun 2025 20:23:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32798: Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors</title><link>https://agentprime.io/advisories/CVE-2025-32798/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32798/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jun 2025 20:10:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32797: Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution</title><link>https://agentprime.io/advisories/CVE-2025-32797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32797/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 16 Jun 2025 18:46:31 GMT</pubDate><category>CVE</category></item></channel></rss>