conda-forge.github.io vulnerabilities

CVEs whose affected-version data names the conda-forge.github.io package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55422Medium· 4.6

today

conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard

conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization…

▾ Sunlitconda-forge · conda-forge.github.iovia CVEORG