Skip to content
OpenAdvisories

Package · Azure Linux

conda

2 known vulnerabilities.

2 results · Feed

  • High 8.8

    Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

    Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_def in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's…

  • Critical 9.8

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit o…