All 2 CVE vulnerabilities found in infrastructure, with AI-generated Chinese analysis, references, and POCs.
Vendor: conda-forge
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-53942 | Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN CWE-94 | 9.9 | Critical | 2026-10-23 |
| CVE-2025-31484 | conda-forge infrastructure uses a bad token for Azure's cf-staging access CWE-284 | 8.8AI | High AI | 2025-04-02 |
All 2 known CVE vulnerabilities affecting infrastructure with full Chinese analysis, references, and POCs where available.