conda-forge is a GitHub organization containing repositories of conda recipes.
conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (the project has no DOMPurify or equivalent dependency). JSON files are produced automatically by the conda-forge autotick bot (regro/cf-scripts) while it processes every conda-forge feedstock and its upstream source artifacts. The error/status strings embed raw output captured from those processes (build logs, patch output, tracebacks). The website renders th
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- GitHub
- Product
- github
- CVSS
- 4.6
Why it ranks 3 (Routine)
- CVSS 4.6 medium
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-55422 on this site · NVD · CVE.org · Vulnpedia