Skip to content
OpenAdvisories

Product · conda-forge

infrastructure

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-31484

    conda-forge infrastructure uses a bad token for Azure's cf-staging access

    conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any fee…

    conda-forge infrastructure