Vulnerabilities for py-rattler

First version without a known vulnerability: 0.24.0

Details

• GHSA-h672-p7h7-97v92026-07-09

  Rattler vulnerable to package cache path traversal via conda package build string

  Fixed in: 0.9.0, 0.24.0

• GHSA-q53q-5r4j-57292026-06-01

  rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

  Fixed in: 0.43.2, 0.24.0