What’s Vulnerable › Products

conda-build vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your conda-build version is affected

Latest conda-build vulnerabilities

• CVE-2025-32800 — Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI (CVSS 9.8)
• CVE-2025-32799 — Conda-build Vulnerable to Path Traversal via Malicious Tar File (CVSS 9.8)
• CVE-2025-32798 — Conda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors (CVSS 9.8)
• CVE-2025-32797 — Conda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution (CVSS 7.0)