8 matches found
CVE-2026-53956 Rattler vulnerable to package cache path traversal via conda package build string
Rattler is a library that provides common functionality used within the conda ecosystem. rattlercache prior to version 0.9.0 and py-rattler prior to version 0.24.0 were vulnerable to package-cache path traversal when handling package metadata from conda channels. During cache materialization, the...
CVE-2026-53956 Rattler vulnerable to package cache path traversal via conda package build string
Rattler is a library that provides common functionality used within the conda ecosystem. rattlercache prior to version 0.9.0 and py-rattler prior to version 0.24.0 were vulnerable to package-cache path traversal when handling package metadata from conda channels. During cache materialization, the...
CVE-2026-53956
Rattler is a library providing common functionality for the conda ecosystem. rattler_cache prior to 0.9.0 and py-rattler prior to 0.24.0 are vulnerable to package-cache path traversal . During cache materialization, the package record build string is joined into a filesystem path without proper s...
AZL-79334 CVE-2026-3381 affecting package conda 24.3.0-4
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for...
EUVD-2025-18445
Malicious code in bioql PyPI...
MAL-2025-41639 Malicious code in conda-package-handling111 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
