rattler_cache vulnerabilities

CVEs whose affected-version data names the rattler_cache package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53956Medium· 5.4

1w ago

Rattler vulnerable to package cache path traversal via conda package build string

Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior to version 0.9.0 and `py-rattler` prior to version 0.24.0 were vulnerable to package-cache path traversal when handling packag…

▾ Sunlitconda · rattler_cacheEPSS 0.24%via CVEORG