Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/vantage6@2.2.9
Typepypi
Namespace
Namevantage6
Version2.2.9
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.11.0
Latest_non_vulnerable_version5.0.0
Affected_by_vulnerabilities
0
url VCID-3nfq-a2qc-2kaw
vulnerability_id VCID-3nfq-a2qc-2kaw
summary vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-41881
reference_id
reference_type
scores
0
value 0.00086
scoring_system epss
scoring_elements 0.24915
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-41881
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-200.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-200.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value LOW
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:13Z/
url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
4
reference_url https://github.com/vantage6/vantage6/commit/cce9538f8b70e814c080dd0ae43b297f3af8a732
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/commit/cce9538f8b70e814c080dd0ae43b297f3af8a732
5
reference_url https://github.com/vantage6/vantage6/pull/748
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value LOW
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:13Z/
url https://github.com/vantage6/vantage6/pull/748
6
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
3
value LOW
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:13Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-41881
reference_id CVE-2023-41881
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 1.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-41881
8
reference_url https://github.com/advisories/GHSA-rf54-7qrr-96j6
reference_id GHSA-rf54-7qrr-96j6
reference_type
scores
url https://github.com/advisories/GHSA-rf54-7qrr-96j6
fixed_packages
0
url pkg:pypi/vantage6@4.0.0
purl pkg:pypi/vantage6@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-77kr-a99z-r3f8
1
vulnerability VCID-7smm-dre6-euhs
2
vulnerability VCID-a33e-xhz8-fkey
3
vulnerability VCID-cc7t-us5t-ffbb
4
vulnerability VCID-cwg5-wr8x-vuf3
5
vulnerability VCID-hdj5-dmqq-cqdp
6
vulnerability VCID-sgwu-s2e9-7qbp
7
vulnerability VCID-tjnd-7tza-1fay
8
vulnerability VCID-umwj-b2xx-hkcg
9
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.0.0
aliases CVE-2023-41881, GHSA-rf54-7qrr-96j6, PYSEC-2023-200
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3nfq-a2qc-2kaw
1
url VCID-6gbf-4kqb-6yce
vulnerability_id VCID-6gbf-4kqb-6yce
summary vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different organizations is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain their permissions and therefore might be able to access stuff they should not be allowed to access. This issue is patched in version 3.8.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-22738
reference_id
reference_type
scores
0
value 0.00162
scoring_system epss
scoring_elements 0.36818
published_at 2026-06-04T12:55:00Z
1
value 0.00162
scoring_system epss
scoring_elements 0.36911
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-22738
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-53.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-53.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/798aca1de142a4eca175ef51112e2235642f4f24
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T19:07:35Z/
url https://github.com/vantage6/vantage6/commit/798aca1de142a4eca175ef51112e2235642f4f24
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-vvjv-97j8-94xh
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T19:07:35Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-vvjv-97j8-94xh
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-22738
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-22738
6
reference_url https://github.com/advisories/GHSA-vvjv-97j8-94xh
reference_id GHSA-vvjv-97j8-94xh
reference_type
scores
url https://github.com/advisories/GHSA-vvjv-97j8-94xh
fixed_packages
0
url pkg:pypi/vantage6@3.6.1
purl pkg:pypi/vantage6@3.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-77kr-a99z-r3f8
2
vulnerability VCID-7smm-dre6-euhs
3
vulnerability VCID-a33e-xhz8-fkey
4
vulnerability VCID-cc7t-us5t-ffbb
5
vulnerability VCID-cwg5-wr8x-vuf3
6
vulnerability VCID-hdj5-dmqq-cqdp
7
vulnerability VCID-jx74-5qee-4qgp
8
vulnerability VCID-jzwd-57k4-qyaa
9
vulnerability VCID-kkn4-bq4e-yqd9
10
vulnerability VCID-sgwu-s2e9-7qbp
11
vulnerability VCID-tjnd-7tza-1fay
12
vulnerability VCID-tkb7-qyaj-zfcz
13
vulnerability VCID-umwj-b2xx-hkcg
14
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.6.1
1
url pkg:pypi/vantage6@3.8.0rc3
purl pkg:pypi/vantage6@3.8.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-77kr-a99z-r3f8
2
vulnerability VCID-7smm-dre6-euhs
3
vulnerability VCID-a33e-xhz8-fkey
4
vulnerability VCID-cc7t-us5t-ffbb
5
vulnerability VCID-cwg5-wr8x-vuf3
6
vulnerability VCID-hdj5-dmqq-cqdp
7
vulnerability VCID-jx74-5qee-4qgp
8
vulnerability VCID-jzwd-57k4-qyaa
9
vulnerability VCID-kkn4-bq4e-yqd9
10
vulnerability VCID-sgwu-s2e9-7qbp
11
vulnerability VCID-tjnd-7tza-1fay
12
vulnerability VCID-tkb7-qyaj-zfcz
13
vulnerability VCID-umwj-b2xx-hkcg
14
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.8.0rc3
2
url pkg:pypi/vantage6@3.8.0
purl pkg:pypi/vantage6@3.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-6gbf-4kqb-6yce
2
vulnerability VCID-77kr-a99z-r3f8
3
vulnerability VCID-7smm-dre6-euhs
4
vulnerability VCID-a33e-xhz8-fkey
5
vulnerability VCID-cc7t-us5t-ffbb
6
vulnerability VCID-cwg5-wr8x-vuf3
7
vulnerability VCID-hdj5-dmqq-cqdp
8
vulnerability VCID-jx74-5qee-4qgp
9
vulnerability VCID-jzwd-57k4-qyaa
10
vulnerability VCID-sgwu-s2e9-7qbp
11
vulnerability VCID-tjnd-7tza-1fay
12
vulnerability VCID-umwj-b2xx-hkcg
13
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.8.0
3
url pkg:pypi/vantage6@3.8.1
purl pkg:pypi/vantage6@3.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-77kr-a99z-r3f8
2
vulnerability VCID-7smm-dre6-euhs
3
vulnerability VCID-a33e-xhz8-fkey
4
vulnerability VCID-cc7t-us5t-ffbb
5
vulnerability VCID-cwg5-wr8x-vuf3
6
vulnerability VCID-hdj5-dmqq-cqdp
7
vulnerability VCID-jx74-5qee-4qgp
8
vulnerability VCID-jzwd-57k4-qyaa
9
vulnerability VCID-sgwu-s2e9-7qbp
10
vulnerability VCID-tjnd-7tza-1fay
11
vulnerability VCID-umwj-b2xx-hkcg
12
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.8.1
aliases CVE-2023-22738, GHSA-vvjv-97j8-94xh, GMS-2023-493, PYSEC-2023-53
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6gbf-4kqb-6yce
2
url VCID-77kr-a99z-r3f8
vulnerability_id VCID-77kr-a99z-r3f8
summary The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not exposed so there is no risk, but not all deployments are ideal. The default should therefore be less permissive. The vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker image. Version 4.2.0 patches the vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-21653
reference_id
reference_type
scores
0
value 0.00226
scoring_system epss
scoring_elements 0.45534
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-21653
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2024-34.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2024-34.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-23T18:07:24Z/
url https://github.com/vantage6/vantage6/commit/3fcc6e6a8bd1142fd7a558d8fdd2b246e55c8841
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-2wgc-48g2-cj5w
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-23T18:07:24Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-2wgc-48g2-cj5w
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-21653
reference_id CVE-2024-21653
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-21653
6
reference_url https://github.com/advisories/GHSA-2wgc-48g2-cj5w
reference_id GHSA-2wgc-48g2-cj5w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2wgc-48g2-cj5w
fixed_packages
0
url pkg:pypi/vantage6@4.2.0
purl pkg:pypi/vantage6@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
2
vulnerability VCID-cwg5-wr8x-vuf3
3
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.2.0
aliases CVE-2024-21653, GHSA-2wgc-48g2-cj5w, PYSEC-2024-33, PYSEC-2024-34
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-77kr-a99z-r3f8
3
url VCID-7smm-dre6-euhs
vulnerability_id VCID-7smm-dre6-euhs
summary 
vantage6 collaboration admins can extend their influence by expanding the collaboration
Collaboration administrators can add extra organizations to their collaboration. When doing that, they extend their influence: for instance, for organizations that they include, they can then create new users for which they know the passwords, and use that to read task results of other collaborations that that organization is involved in.

Only relatively trusted users - with access to manage a collaboration - are able to do this, which reduces the impact.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-32969
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41544
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-32969
1
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
2
reference_url https://github.com/vantage6/vantage6/commit/27f4ee3fade5f4cbcf3e60899c9a2a91145e0b56
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-23T15:35:32Z/
url https://github.com/vantage6/vantage6/commit/27f4ee3fade5f4cbcf3e60899c9a2a91145e0b56
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-32969
reference_id CVE-2024-32969
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-32969
4
reference_url https://github.com/advisories/GHSA-99r4-cjp4-3hmx
reference_id GHSA-99r4-cjp4-3hmx
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-99r4-cjp4-3hmx
5
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-99r4-cjp4-3hmx
reference_id GHSA-99r4-cjp4-3hmx
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-23T15:35:32Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-99r4-cjp4-3hmx
fixed_packages
0
url pkg:pypi/vantage6@4.5.0rc3
purl pkg:pypi/vantage6@4.5.0rc3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cc7t-us5t-ffbb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.5.0rc3
aliases CVE-2024-32969, GHSA-99r4-cjp4-3hmx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7smm-dre6-euhs
4
url VCID-a33e-xhz8-fkey
vulnerability_id VCID-a33e-xhz8-fkey
summary vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Version 4.0.0 contains a patch. Users may specify JSON serialization as a workaround.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23930
reference_id
reference_type
scores
0
value 0.00799
scoring_system epss
scoring_elements 0.74415
published_at 2026-06-05T12:55:00Z
1
value 0.00799
scoring_system epss
scoring_elements 0.74383
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23930
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-196.yaml
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-196.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:02:52Z/
url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
4
reference_url https://github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:02:52Z/
url https://github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0
5
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:02:52Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6
6
reference_url https://medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:02:52Z/
url https://medium.com/ochrona/python-pickle-is-notoriously-insecure-d6651f1974c9
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-23930
reference_id CVE-2023-23930
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-23930
8
reference_url https://github.com/advisories/GHSA-5m22-cfq9-86x6
reference_id GHSA-5m22-cfq9-86x6
reference_type
scores
url https://github.com/advisories/GHSA-5m22-cfq9-86x6
fixed_packages
0
url pkg:pypi/vantage6@4.0.2
purl pkg:pypi/vantage6@4.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-77kr-a99z-r3f8
1
vulnerability VCID-7smm-dre6-euhs
2
vulnerability VCID-cc7t-us5t-ffbb
3
vulnerability VCID-cwg5-wr8x-vuf3
4
vulnerability VCID-hdj5-dmqq-cqdp
5
vulnerability VCID-sgwu-s2e9-7qbp
6
vulnerability VCID-tjnd-7tza-1fay
7
vulnerability VCID-umwj-b2xx-hkcg
8
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.0.2
aliases CVE-2023-23930, GHSA-5m22-cfq9-86x6, PYSEC-2023-196
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a33e-xhz8-fkey
5
url VCID-cc7t-us5t-ffbb
vulnerability_id VCID-cc7t-us5t-ffbb
summary vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. If attacker gets access to an authenticated session, they can try to brute-force the user password by using the change password functionality: they can call that route infinitely which will return the message that password is wrong until it is correct. This vulnerability is fixed in 4.11.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-43863
reference_id
reference_type
scores
0
value 0.00316
scoring_system epss
scoring_elements 0.55004
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-43863
1
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
2
reference_url https://github.com/vantage6/vantage6/commit/e0f1841b310f6f610e8137db2506cf683ce154d0
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/commit/e0f1841b310f6f610e8137db2506cf683ce154d0
3
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-j6g5-p62x-58hw
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-12T17:54:31Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-j6g5-p62x-58hw
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-43863
reference_id CVE-2025-43863
reference_type
scores
0
value 1.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-43863
5
reference_url https://github.com/advisories/GHSA-j6g5-p62x-58hw
reference_id GHSA-j6g5-p62x-58hw
reference_type
scores
url https://github.com/advisories/GHSA-j6g5-p62x-58hw
fixed_packages
0
url pkg:pypi/vantage6@4.11.0
purl pkg:pypi/vantage6@4.11.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.11.0
1
url pkg:pypi/vantage6@5.0.0a0
purl pkg:pypi/vantage6@5.0.0a0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@5.0.0a0
aliases CVE-2025-43863, GHSA-j6g5-p62x-58hw, PYSEC-2025-220
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cc7t-us5t-ffbb
6
url VCID-cwg5-wr8x-vuf3
vulnerability_id VCID-cwg5-wr8x-vuf3
summary 
vantage6's CORS settings overly permissive
### Impact
The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server. 

The impact is limited because v6 does not use session cookies

### Patches
No

### Workarounds
No
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-23823
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41512
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-23823
1
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
2
reference_url https://github.com/vantage6/vantage6/commit/70bb4e1d889230a841eb364d6c03accd7dd01a41
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T18:18:24Z/
url https://github.com/vantage6/vantage6/commit/70bb4e1d889230a841eb364d6c03accd7dd01a41
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-23823
reference_id CVE-2024-23823
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-23823
4
reference_url https://github.com/advisories/GHSA-4946-85pr-fvxh
reference_id GHSA-4946-85pr-fvxh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4946-85pr-fvxh
5
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-4946-85pr-fvxh
reference_id GHSA-4946-85pr-fvxh
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-16T18:18:24Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-4946-85pr-fvxh
fixed_packages
0
url pkg:pypi/vantage6@4.3.0
purl pkg:pypi/vantage6@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.3.0
aliases CVE-2024-23823, GHSA-4946-85pr-fvxh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cwg5-wr8x-vuf3
7
url VCID-hdj5-dmqq-cqdp
vulnerability_id VCID-hdj5-dmqq-cqdp
summary The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-21671
reference_id
reference_type
scores
0
value 0.0022
scoring_system epss
scoring_elements 0.44717
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-21671
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-31.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-31.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T15:22:33Z/
url https://github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system cvssv3.1_qr
scoring_elements
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T15:22:33Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-21671
reference_id CVE-2024-21671
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-21671
6
reference_url https://github.com/advisories/GHSA-45gq-q4xh-cp53
reference_id GHSA-45gq-q4xh-cp53
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-45gq-q4xh-cp53
fixed_packages
0
url pkg:pypi/vantage6@4.2.0
purl pkg:pypi/vantage6@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
2
vulnerability VCID-cwg5-wr8x-vuf3
3
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.2.0
aliases CVE-2024-21671, GHSA-45gq-q4xh-cp53, PYSEC-2024-31
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hdj5-dmqq-cqdp
8
url VCID-jx74-5qee-4qgp
vulnerability_id VCID-jx74-5qee-4qgp
summary vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-41882
reference_id
reference_type
scores
0
value 0.00145
scoring_system epss
scoring_elements 0.34578
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-41882
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-201.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-201.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:46:12Z/
url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
4
reference_url https://github.com/vantage6/vantage6/commit/86564e103cbac5238ce2fe392e3357e0e8c20220
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/commit/86564e103cbac5238ce2fe392e3357e0e8c20220
5
reference_url https://github.com/vantage6/vantage6/pull/711
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:46:12Z/
url https://github.com/vantage6/vantage6/pull/711
6
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-gc57-xhh5-m94r
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:46:12Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-gc57-xhh5-m94r
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-41882
reference_id CVE-2023-41882
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-41882
8
reference_url https://github.com/advisories/GHSA-gc57-xhh5-m94r
reference_id GHSA-gc57-xhh5-m94r
reference_type
scores
url https://github.com/advisories/GHSA-gc57-xhh5-m94r
fixed_packages
0
url pkg:pypi/vantage6@4.0.0
purl pkg:pypi/vantage6@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-77kr-a99z-r3f8
1
vulnerability VCID-7smm-dre6-euhs
2
vulnerability VCID-a33e-xhz8-fkey
3
vulnerability VCID-cc7t-us5t-ffbb
4
vulnerability VCID-cwg5-wr8x-vuf3
5
vulnerability VCID-hdj5-dmqq-cqdp
6
vulnerability VCID-sgwu-s2e9-7qbp
7
vulnerability VCID-tjnd-7tza-1fay
8
vulnerability VCID-umwj-b2xx-hkcg
9
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.0.0
aliases CVE-2023-41882, GHSA-gc57-xhh5-m94r, PYSEC-2023-201
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jx74-5qee-4qgp
9
url VCID-jzwd-57k4-qyaa
vulnerability_id VCID-jzwd-57k4-qyaa
summary vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28635
reference_id
reference_type
scores
0
value 0.00307
scoring_system epss
scoring_elements 0.54228
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28635
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-198.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-198.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:35Z/
url https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400
4
reference_url https://github.com/vantage6/vantage6/commit/aacfc24548cbf168579d2e13b2ddaf8ded715d36
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/commit/aacfc24548cbf168579d2e13b2ddaf8ded715d36
5
reference_url https://github.com/vantage6/vantage6/pull/744
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:35Z/
url https://github.com/vantage6/vantage6/pull/744
6
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-17T13:49:35Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28635
reference_id CVE-2023-28635
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28635
8
reference_url https://github.com/advisories/GHSA-7x94-6g2m-3hp2
reference_id GHSA-7x94-6g2m-3hp2
reference_type
scores
url https://github.com/advisories/GHSA-7x94-6g2m-3hp2
fixed_packages
0
url pkg:pypi/vantage6@4.0.0
purl pkg:pypi/vantage6@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-77kr-a99z-r3f8
1
vulnerability VCID-7smm-dre6-euhs
2
vulnerability VCID-a33e-xhz8-fkey
3
vulnerability VCID-cc7t-us5t-ffbb
4
vulnerability VCID-cwg5-wr8x-vuf3
5
vulnerability VCID-hdj5-dmqq-cqdp
6
vulnerability VCID-sgwu-s2e9-7qbp
7
vulnerability VCID-tjnd-7tza-1fay
8
vulnerability VCID-umwj-b2xx-hkcg
9
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.0.0
aliases CVE-2023-28635, GHSA-7x94-6g2m-3hp2, PYSEC-2023-198
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jzwd-57k4-qyaa
10
url VCID-kkn4-bq4e-yqd9
vulnerability_id VCID-kkn4-bq4e-yqd9
summary vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23929
reference_id
reference_type
scores
0
value 0.00283
scoring_system epss
scoring_elements 0.51992
published_at 2026-06-05T12:55:00Z
1
value 0.00283
scoring_system epss
scoring_elements 0.51931
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23929
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-54.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-54.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:03Z/
url https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:30:03Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-23929
reference_id CVE-2023-23929
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-23929
6
reference_url https://github.com/advisories/GHSA-4w59-c3gc-rrhp
reference_id GHSA-4w59-c3gc-rrhp
reference_type
scores
url https://github.com/advisories/GHSA-4w59-c3gc-rrhp
fixed_packages
0
url pkg:pypi/vantage6@3.8.0
purl pkg:pypi/vantage6@3.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-6gbf-4kqb-6yce
2
vulnerability VCID-77kr-a99z-r3f8
3
vulnerability VCID-7smm-dre6-euhs
4
vulnerability VCID-a33e-xhz8-fkey
5
vulnerability VCID-cc7t-us5t-ffbb
6
vulnerability VCID-cwg5-wr8x-vuf3
7
vulnerability VCID-hdj5-dmqq-cqdp
8
vulnerability VCID-jx74-5qee-4qgp
9
vulnerability VCID-jzwd-57k4-qyaa
10
vulnerability VCID-sgwu-s2e9-7qbp
11
vulnerability VCID-tjnd-7tza-1fay
12
vulnerability VCID-umwj-b2xx-hkcg
13
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.8.0
aliases CVE-2023-23929, GHSA-4w59-c3gc-rrhp, GMS-2023-492, PYSEC-2023-54
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kkn4-bq4e-yqd9
11
url VCID-sgwu-s2e9-7qbp
vulnerability_id VCID-sgwu-s2e9-7qbp
summary The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is patched in 4.2.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-21649
reference_id
reference_type
scores
0
value 0.06104
scoring_system epss
scoring_elements 0.90949
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-21649
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-30.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-30.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T18:45:04Z/
url https://github.com/vantage6/vantage6/commit/eac19db737145d3ca987adf037a454fae0790ddd
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-w9h2-px87-74vx
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-08T18:45:04Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-w9h2-px87-74vx
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-21649
reference_id CVE-2024-21649
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-21649
6
reference_url https://github.com/advisories/GHSA-w9h2-px87-74vx
reference_id GHSA-w9h2-px87-74vx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w9h2-px87-74vx
fixed_packages
0
url pkg:pypi/vantage6@4.2.0
purl pkg:pypi/vantage6@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
2
vulnerability VCID-cwg5-wr8x-vuf3
3
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.2.0
aliases CVE-2024-21649, GHSA-w9h2-px87-74vx, PYSEC-2024-30
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sgwu-s2e9-7qbp
12
url VCID-tjnd-7tza-1fay
vulnerability_id VCID-tjnd-7tza-1fay
summary The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). There are no checks on whether the input is encrypted if a task is created in an encrypted collaboration. Therefore, a user may accidentally create a task with sensitive input data that will then be stored unencrypted in a database. Users should ensure they set the encryption setting correctly. This vulnerability is patched in 4.2.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22193
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41515
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22193
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-32.yaml
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-32.yaml
2
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
3
reference_url https://github.com/vantage6/vantage6/commit/6383283733b81abfcacfec7538dc4dc882e98074
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-21T19:47:42Z/
url https://github.com/vantage6/vantage6/commit/6383283733b81abfcacfec7538dc4dc882e98074
4
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-rjmv-52mp-gjrr
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
2
value LOW
scoring_system cvssv3.1_qr
scoring_elements
3
value LOW
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-21T19:47:42Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-rjmv-52mp-gjrr
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22193
reference_id CVE-2024-22193
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22193
6
reference_url https://github.com/advisories/GHSA-rjmv-52mp-gjrr
reference_id GHSA-rjmv-52mp-gjrr
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rjmv-52mp-gjrr
fixed_packages
0
url pkg:pypi/vantage6@4.2.0
purl pkg:pypi/vantage6@4.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
2
vulnerability VCID-cwg5-wr8x-vuf3
3
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.2.0
aliases CVE-2024-22193, GHSA-rjmv-52mp-gjrr, PYSEC-2024-32
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tjnd-7tza-1fay
13
url VCID-tkb7-qyaj-zfcz
vulnerability_id VCID-tkb7-qyaj-zfcz
summary vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists. This is an attempt to prevent bots from obtaining usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This issue has been fixed in version 3.8.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-39228
reference_id
reference_type
scores
0
value 0.0028
scoring_system epss
scoring_elements 0.517
published_at 2026-06-05T12:55:00Z
1
value 0.0028
scoring_system epss
scoring_elements 0.5164
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-39228
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-313.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-313.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-52.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-52.yaml
3
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
4
reference_url https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T21:24:19Z/
url https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2
5
reference_url https://github.com/vantage6/vantage6/issues/59
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T21:24:19Z/
url https://github.com/vantage6/vantage6/issues/59
6
reference_url https://github.com/vantage6/vantage6/pull/281
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T21:24:19Z/
url https://github.com/vantage6/vantage6/pull/281
7
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-36gx-9q6h-g429
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
2
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T21:24:19Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-36gx-9q6h-g429
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-39228
reference_id CVE-2022-39228
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-39228
9
reference_url https://github.com/advisories/GHSA-36gx-9q6h-g429
reference_id GHSA-36gx-9q6h-g429
reference_type
scores
url https://github.com/advisories/GHSA-36gx-9q6h-g429
fixed_packages
0
url pkg:pypi/vantage6@3.8.0
purl pkg:pypi/vantage6@3.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nfq-a2qc-2kaw
1
vulnerability VCID-6gbf-4kqb-6yce
2
vulnerability VCID-77kr-a99z-r3f8
3
vulnerability VCID-7smm-dre6-euhs
4
vulnerability VCID-a33e-xhz8-fkey
5
vulnerability VCID-cc7t-us5t-ffbb
6
vulnerability VCID-cwg5-wr8x-vuf3
7
vulnerability VCID-hdj5-dmqq-cqdp
8
vulnerability VCID-jx74-5qee-4qgp
9
vulnerability VCID-jzwd-57k4-qyaa
10
vulnerability VCID-sgwu-s2e9-7qbp
11
vulnerability VCID-tjnd-7tza-1fay
12
vulnerability VCID-umwj-b2xx-hkcg
13
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@3.8.0
aliases CVE-2022-39228, GHSA-36gx-9q6h-g429, GMS-2023-491, PYSEC-2023-313, PYSEC-2023-52
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tkb7-qyaj-zfcz
14
url VCID-umwj-b2xx-hkcg
vulnerability_id VCID-umwj-b2xx-hkcg
summary vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47631
reference_id
reference_type
scores
0
value 0.00325
scoring_system epss
scoring_elements 0.55859
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47631
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-303.yaml
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-303.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2023-304.yaml
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2023-304.yaml
3
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
4
reference_url https://github.com/vantage6/vantage6/blob/version/4.1.1/vantage6-node/vantage6/node/docker/docker_manager.py#L265-L268
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/blob/version/4.1.1/vantage6-node/vantage6/node/docker/docker_manager.py#L265-L268
5
reference_url https://github.com/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243
6
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-vc3v-ppc7-v486
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6/security/advisories/GHSA-vc3v-ppc7-v486
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-47631
reference_id CVE-2023-47631
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-47631
8
reference_url https://github.com/advisories/GHSA-vc3v-ppc7-v486
reference_id GHSA-vc3v-ppc7-v486
reference_type
scores
url https://github.com/advisories/GHSA-vc3v-ppc7-v486
fixed_packages
0
url pkg:pypi/vantage6@4.1.2
purl pkg:pypi/vantage6@4.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-77kr-a99z-r3f8
1
vulnerability VCID-7smm-dre6-euhs
2
vulnerability VCID-cc7t-us5t-ffbb
3
vulnerability VCID-cwg5-wr8x-vuf3
4
vulnerability VCID-hdj5-dmqq-cqdp
5
vulnerability VCID-sgwu-s2e9-7qbp
6
vulnerability VCID-tjnd-7tza-1fay
7
vulnerability VCID-zvar-nu8h-8qd8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.1.2
aliases CVE-2023-47631, GHSA-vc3v-ppc7-v486, PYSEC-2023-303, PYSEC-2023-304
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-umwj-b2xx-hkcg
15
url VCID-zvar-nu8h-8qd8
vulnerability_id VCID-zvar-nu8h-8qd8
summary 
vantage6 vulnerable to a username timing attack on recover password/MFA token
### Impact
Much like https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53, it is possible to find which usernames exist in vantage6 by calling the API routes `/recover/lost` and `/2fa/lost`, which send emails to users if they have lost their password or MFA token. Usernames can be found by assessing response time differences, and additionally, they can be found because the endpoint gives a response "Failed to login" if the username exists.

### Patches
No

### Workarounds
No
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-24770
reference_id
reference_type
scores
0
value 0.00198
scoring_system epss
scoring_elements 0.41802
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-24770
1
reference_url https://github.com/vantage6/vantage6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/vantage6/vantage6
2
reference_url https://github.com/vantage6/vantage6/commit/aecfd6d0e83165a41a60ebd52d2287b0217be26b
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-26T15:16:22Z/
url https://github.com/vantage6/vantage6/commit/aecfd6d0e83165a41a60ebd52d2287b0217be26b
3
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-26T15:16:22Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-24770
reference_id CVE-2024-24770
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-24770
5
reference_url https://github.com/advisories/GHSA-5h3x-6gwf-73jm
reference_id GHSA-5h3x-6gwf-73jm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5h3x-6gwf-73jm
6
reference_url https://github.com/vantage6/vantage6/security/advisories/GHSA-5h3x-6gwf-73jm
reference_id GHSA-5h3x-6gwf-73jm
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-08-26T15:16:22Z/
url https://github.com/vantage6/vantage6/security/advisories/GHSA-5h3x-6gwf-73jm
fixed_packages
0
url pkg:pypi/vantage6@4.3.0
purl pkg:pypi/vantage6@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7smm-dre6-euhs
1
vulnerability VCID-cc7t-us5t-ffbb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@4.3.0
aliases CVE-2024-24770, GHSA-5h3x-6gwf-73jm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zvar-nu8h-8qd8
Fixing_vulnerabilities
Risk_score4.4
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/vantage6@2.2.9