Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/02 9:38 p.m.13 views

CVE-2025-31484 conda-forge infrastructure uses a bad token for Azure's cf-staging access

conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a packa...

9.3CVSS6.8AI score0.00387EPSS
SaveExploits0References4
Rows per page
Query Builder