Login Request a demo
CO
Product
conda-smithy
by conda-forge · last CVE Jun 18, 2026
3
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 2
Severity
All severities3Critical0High1Medium0Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add conda-smithy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46699
7.6
0%
Jun 18
conda-smithy vulnerable to misrouted repository invitation by conda-forge-webservices[bot] due to GitHub username takeover leading to unintended write access in conda-forge feedstock repository
Affected: < 3.61.0
CVE-2025-49843
2.7
1%
Jun 17
conda-smithy Has Incorrect Default File Permissions
Affected: < 3.47.1
CVE-2025-49824
1.7
0%
Jun 17
conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack
Affected: < 3.47.1
Showing 3