conda-smithy vulnerabilities
1 known vulnerability in conda-smithy from Conda-forge. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest first
- 7.6 High severity
conda-smithy: Improper Access Control
conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.61.0, a vulnerability in the conda-forge automated webservices allowed unintended write access to feed