CVE-2026-47425 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

[
  {
    "vendor": "conda",
    "product": "rattler",
    "versions": [
      {
        "version": "< 0.43.2",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "conda",
    "product": "py-rattler",
    "versions": [
      {
        "version": "< 0.24.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "conda",
    "product": "rattler-build",
    "versions": [
      {
        "version": "< 0.65.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "prefix-dev",
    "product": "pixi",
    "versions": [
      {
        "version": "< 0.69.0",
        "status": "affected"
      }
    ]
  }
]