https://vulnerability.circl.lu/sightings/feed 2026-09-07T12:28:15.796154+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f99448cb-cda3-405c-8bc2-4453c59224fc/export 2026-09-07T12:28:15.803498+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f99448cb-cda3-405c-8bc2-4453c59224fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M4H2-49XF-VQ72", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31484\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure.\nBetween 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found.\n\ud83d\udccf Published: 2025-04-02T21:38:03.493Z\n\ud83d\udccf Modified: 2025-04-02T21:38:03.493Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/infrastructure/security/advisories/GHSA-m4h2-49xf-vq72\n2. https://github.com/conda-forge/infrastructure/commit/70f3f09e64968d5f0a7b0525846f17cad42dd052", "creation_timestamp": "2025-04-02T22:34:43.000000Z"} 2025-04-02T22:34:43+00:00 https://vulnerability.circl.lu/sighting/a45b5b96-73d7-4f33-bbef-44d56fdda37e/export 2026-09-07T12:28:15.804751+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a45b5b96-73d7-4f33-bbef-44d56fdda37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.223401Z"} 2025-04-02T22:11:54.223401+00:00 https://vulnerability.circl.lu/sighting/f1c38084-6009-4a98-a016-b6189781f630/export 2026-09-07T12:28:15.804861+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f1c38084-6009-4a98-a016-b6189781f630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.218987Z"} 2025-04-02T22:11:54.218987+00:00