MEDIUM5.4crates.ioPyPI
GHSA-h672-p7h7-97v9· CVE-2026-53956, PYSEC-2026-2970Rattler vulnerable to package cache path traversal via conda package build string
Modified: 7/13/2026
package
PyPI/py-rattler
pkg:pypi/py-rattler
MEDIUMcrates.ioPyPI
GHSA-q53q-5r4j-5729· CVE-2026-47425, PYSEC-2026-2971rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Modified: 7/13/2026
MEDIUM5.4PyPI
PYSEC-2026-2970· CVE-2026-53956, GHSA-h672-p7h7-97v9Rattler vulnerable to package cache path traversal via conda package build string
Modified: 7/13/2026
—PyPI
PYSEC-2026-2971· CVE-2026-47425, GHSA-q53q-5r4j-5729rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Modified: 7/13/2026