Skip to content
OpenAdvisories

Product · conda-forge

conda-forge.github.io

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2026-55422

    conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard

    conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (the project has no D…

    conda-forge conda-forge.github.io