CO
Product
conda-smithy
3
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 2
Watch
Add conda-smithy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46699 | 7.6 | Jun 18 | conda-smithy vulnerable to misrouted repository invitation by conda-forge-webservices[bot] due to GitHub username takeover leading to unintended write access in conda-forge feedstock repository Affected: < 3.61.0 |
Showing 1