conda-forge conda-smithy

• CVE-2026-46699 High 7.6 conda-smithy vulnerable to misrouted repository invitation by conda-forge-webservices[bot] due to GitHub username takeover leading to unintended write access in conda-forge feedstock repository 0.3%
• CVE-2025-49824 Low 1.7 conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack 0.3%
• CVE-2025-49843 Low 2.7 conda-smithy Has Incorrect Default File Permissions 0.6%