EUVD-2022-0146

Malicious code in bioql PyPI...

EUVD-2025-18563

Malicious code in bioql PyPI...

EUVD-2025-28316

Malicious code in bioql PyPI...

EUVD-2025-18461

Malicious code in bioql PyPI...

EUVD-2025-18564

Malicious code in bioql PyPI...

EUVD-2025-18445

Malicious code in bioql PyPI...

EUVD-2025-18459

Malicious code in bioql PyPI...

EUVD-2025-18460

Malicious code in bioql PyPI...

EUVD-2025-18458

Malicious code in bioql PyPI...

EUVD-2025-14756

Malicious code in bioql PyPI...

EUVD-2025-6186

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-28188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of jupyter-scheduler users...

MAL-2025-41639 Malicious code in conda-package-handling111 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in conda-package-handling111 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2022-0338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3. CVE-2022-0338 Note that Nessus relies on the presence of the package as reporte...

CVE-2025-49843

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisheaders function in the conda-smithy repository creates files with permissions exceeding 0o600, allowing read and write...

CVE-2025-49824

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisencryptbinstartoken implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attac...

CVE-2025-49842

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the condaforgewebservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases the risk of privile...

CVE-2025-49843

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisheaders function in the conda-smithy repository creates files with permissions exceeding 0o600, allowing read and write...

CVE-2025-49824

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisencryptbinstartoken implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attac...