CVE-2025-49824 | conda-forge conda-smithy up to 3.47.0 travis_encrypt_binstar_token information disclosure (GHSA-2xf4-hg9q-m58q)

June 18, 2025 Yanac

A vulnerability was found in conda-forge conda-smithy up to 3.47.0. It has been declared as problematic. This vulnerability affects the function travis_encrypt_binstar_token. The manipulation leads to information disclosure.

This vulnerability was named CVE-2025-49824. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More