miniforge vulnerabilities

1 known vulnerability in miniforge from Conda-forge. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  openssl-feedstock: Uncontrolled Search Path Element

  CVE-2025-35471May 13, 2025Conda-forge

  conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privile