What’s Vulnerable › Products

conda-forge conda-smithy vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your conda-forge conda-smithy version is affected

Latest conda-forge conda-smithy vulnerabilities

• CVE-2026-46699 — conda-smithy vulnerable to misrouted repository invitation by conda-forge-webservices[bot] due to GitHub username takeover leading to unintended write access in conda-forge feedstock repository (CVSS 7.6)
• CVE-2025-49843 — conda-smithy Has Incorrect Default File Permissions (CVSS 2.7)
• CVE-2025-49824 — conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack (CVSS 1.7)