VYPR

Conda Forge Webservices

by Conda Forge

Source repositories

CVEs (2)

  • CVE-2025-32784HigApr 15, 2025
    risk 0.42cvss epss 0.00

    conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. In versions prior to 2025.4.10, a race condition vulnerability has been identified in the conda-forge-webservices component used within the shared build infrastructure. This…

  • CVE-2025-49842LowJun 17, 2025
    risk 0.00cvss epss 0.00

    conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the conda_forge_webservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases…