https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 07 Sep 2026 12:28:14 +0000 https://vulnerability.circl.lu/sighting/f99448cb-cda3-405c-8bc2-4453c59224fc/export {"uuid": "f99448cb-cda3-405c-8bc2-4453c59224fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M4H2-49XF-VQ72", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31484\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure.\nBetween 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found.\n\ud83d\udccf Published: 2025-04-02T21:38:03.493Z\n\ud83d\udccf Modified: 2025-04-02T21:38:03.493Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/infrastructure/security/advisories/GHSA-m4h2-49xf-vq72\n2. https://github.com/conda-forge/infrastructure/commit/70f3f09e64968d5f0a7b0525846f17cad42dd052", "creation_timestamp": "2025-04-02T22:34:43.000000Z"} {"uuid": "f99448cb-cda3-405c-8bc2-4453c59224fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M4H2-49XF-VQ72", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31484\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure.\nBetween 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found.\n\ud83d\udccf Published: 2025-04-02T21:38:03.493Z\n\ud83d\udccf Modified: 2025-04-02T21:38:03.493Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/infrastructure/security/advisories/GHSA-m4h2-49xf-vq72\n2. https://github.com/conda-forge/infrastructure/commit/70f3f09e64968d5f0a7b0525846f17cad42dd052", "creation_timestamp": "2025-04-02T22:34:43.000000Z"} https://vulnerability.circl.lu/sighting/f99448cb-cda3-405c-8bc2-4453c59224fc/export Wed, 02 Apr 2025 22:34:43 +0000 https://vulnerability.circl.lu/sighting/a45b5b96-73d7-4f33-bbef-44d56fdda37e/export {"uuid": "a45b5b96-73d7-4f33-bbef-44d56fdda37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.223401Z"} {"uuid": "a45b5b96-73d7-4f33-bbef-44d56fdda37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.223401Z"} https://vulnerability.circl.lu/sighting/a45b5b96-73d7-4f33-bbef-44d56fdda37e/export Wed, 02 Apr 2025 22:11:54 +0000 https://vulnerability.circl.lu/sighting/f1c38084-6009-4a98-a016-b6189781f630/export {"uuid": "f1c38084-6009-4a98-a016-b6189781f630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.218987Z"} {"uuid": "f1c38084-6009-4a98-a016-b6189781f630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m4h2-49xf-vq72", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114270661068874157", "content": "", "creation_timestamp": "2025-04-02T22:11:54.218987Z"} https://vulnerability.circl.lu/sighting/f1c38084-6009-4a98-a016-b6189781f630/export Wed, 02 Apr 2025 22:11:54 +0000