| Vantage6: No limit on emails sent for password/MFA resetCVE-2024-24769 · GHSA-5549-C5Q7-FJ65Version ranges need review. |
vantage6 |
PyPI |
Low
|
Fix reported |
|
| Vantage6: 2FA can be circumvented with hacked email accessCVE-2024-27928 · GHSA-4C5C-2VC3-X5W2Version ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 collaboration admins can extend their influence by expanding the collaborationCVE-2024-32969 · GHSA-99R4-CJP4-3HMXVersion ranges need review. |
vantage6 |
PyPI |
Low
|
Fix reported |
|
| vantage6's CORS settings overly permissiveCVE-2024-23823 · GHSA-4946-85PR-FVXHVersion ranges need review. |
vantage6-servervantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 remote code execution vulnerabilityCVE-2024-21649 · GHSA-W9H2-PX87-74VXVersion ranges need review. |
vantage6 |
PyPI |
High
|
Fix reported |
|
| vantage6 may create unencrypted tasks in encrypted collaborationCVE-2024-22193 · GHSA-RJMV-52MP-GJRRVersion ranges need review. |
vantage6 |
PyPI |
Low
|
Fix reported |
|
| vantage6 has insecure SSH configuration for node and server containersCVE-2024-21653 · GHSA-2WGC-48G2-CJ5WVersion ranges need review. |
vantage6-nodevantage6-server |
PyPI |
Medium
|
Fix reported |
|
| Defining resource name as integer may give unintended access in vantage6CVE-2023-28635 · GHSA-7X94-6G2M-3HP2Version ranges need review. |
vantage6-nodevantage6 |
PyPI |
Medium
|
Fix reported |
|
| Pickle serialization vulnerable to Deserialization of Untrusted DataCVE-2023-23930 · GHSA-5M22-CFQ9-86X6Version ranges need review. |
vantage6 |
PyPI |
High
|
Fix reported |
|
| vantage6 vulnerable to Improper Preservation of PermissionsCVE-2023-22738 · GHSA-VVJV-97J8-94XHVersion ranges need review. |
vantage6 |
PyPI |
High
|
Fix reported |
|
| vantage6 refresh tokens do not expireCVE-2023-23929 · GHSA-4W59-C3GC-RRHPVersion ranges need review. |
vantage6 |
PyPI |
High
|
Fix reported |
|
| vantage6 does not properly delete linked resources when deleting a collaborationCVE-2023-41881 · GHSA-RF54-7QRR-96J6Version ranges need review. |
vantage6 |
PyPI |
Low
|
Fix reported |
|
| vantage6: Algorithm developer can edit another developer's algorithm that is pending / under reviewCVE-2026-73652 · GHSA-47W6-GWP4-W6VCVersion ranges need review. |
vantage6 |
PyPI |
High
|
No fix reported |
|
| Vantage6: Set admin user and password from environment or configurationCVE-2026-54445 · GHSA-FGMC-2HQJ-86V4Version ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 node has an Improper Access Control issueCVE-2026-54533 · GHSA-X9F6-9RVM-MMRGVersion ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 vulnerable to Observable Response DiscrepancyCVE-2022-39228 · GHSA-36GX-9Q6H-G429Version ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 vulnerable to username timing attackCVE-2024-21671 · GHSA-45GQ-Q4XH-CP53Version ranges need review. |
vantage6-servervantage6 |
PyPI |
Low
|
Fix reported |
|
| vantage6 vulnerable to a username timing attack on recover password/MFA tokenCVE-2024-24770 · GHSA-5H3X-6GWF-73JMVersion ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
| vantage6 lacks brute-force protection on change password functionalityCVE-2025-43863 · GHSA-J6G5-P62X-58HWVersion ranges need review. |
vantage6 |
PyPI |
Low
|
Fix reported |
|
| Improper Access Control in vantage6CVE-2023-41882 · GHSA-GC57-XHH5-M94RVersion ranges need review. |
vantage6 |
PyPI |
Medium
|
Fix reported |
|
