Conda-forge Infrastructure vulnerabilities

• conda infrastructure Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN CVE-2026-53942 9.9 CriticalOctober 23, 2026
• conda-forge infrastructure conda-forge infrastructure uses a bad token for Azure's cf-staging access CVE-2025-31484 9.3 CriticalApril 2, 2025