vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes. Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review Patches No Workarounds No...

vantage6-node (3.1.1rc1), vantage6-server (3.1.1rc1) potentially affected by CVE-2026-73652 via vantage6 (3.1.1rc1)

vantage6 PYPI version 3.1.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.1rc1 - vantage6-server 3.1.1rc1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.1.1rc2), vantage6-server (3.1.1rc2) potentially affected by CVE-2026-73652 via vantage6 (3.1.1rc2)

vantage6 PYPI version 3.1.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.1rc2 - vantage6-server 3.1.1rc2 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.2.0rc2), vantage6-server (3.2.0rc2) potentially affected by CVE-2026-73652 via vantage6 (3.2.0rc2)

vantage6 PYPI version 3.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc2 - vantage6-server 3.2.0rc2 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.4.0a3), vantage6-server (3.4.0a3) potentially affected by CVE-2026-73652 via vantage6 (3.4.0a3)

vantage6 PYPI version 3.4.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.0a3 - vantage6-server 3.4.0a3 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.5), vantage6-server (3.3.5) potentially affected by CVE-2026-73652 via vantage6 (3.3.5)

vantage6 PYPI version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.5 - vantage6-server 3.3.5 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.8a4), vantage6-server (3.3.8a4) potentially affected by CVE-2026-73652 via vantage6 (3.3.8a4)

vantage6 PYPI version 3.3.8a4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a4 - vantage6-server 3.3.8a4 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.8a8), vantage6-server (3.3.8a8) potentially affected by CVE-2026-73652 via vantage6 (3.3.8a8)

vantage6 PYPI version 3.3.8a8 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a8 - vantage6-server 3.3.8a8 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.4.1a3), vantage6-server (3.4.1a3) potentially affected by CVE-2026-73652 via vantage6 (3.4.1a3)

vantage6 PYPI version 3.4.1a3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1a3 - vantage6-server 3.4.1a3 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.4.1), vantage6-server (3.4.1) potentially affected by CVE-2026-73652 via vantage6 (3.4.1)

vantage6 PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1 - vantage6-server 3.4.1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.0rc2), vantage6-server (3.3.0rc2) potentially affected by CVE-2026-73652 via vantage6 (3.3.0rc2)

vantage6 PYPI version 3.3.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc2 - vantage6-server 3.3.0rc2 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.2), vantage6-server (3.3.2) potentially affected by CVE-2026-73652 via vantage6 (3.3.2)

vantage6 PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.2 - vantage6-server 3.3.2 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.1.0rc9), vantage6-server (3.1.0rc9) potentially affected by CVE-2026-73652 via vantage6 (3.1.0rc9)

vantage6 PYPI version 3.1.0rc9 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc9 - vantage6-server 3.1.0rc9 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.0), vantage6-server (3.3.0) potentially affected by CVE-2026-73652 via vantage6 (3.3.0)

vantage6 PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0 - vantage6-server 3.3.0 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.3.1), vantage6-server (3.3.1) potentially affected by CVE-2026-73652 via vantage6 (3.3.1)

vantage6 PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.1 - vantage6-server 3.3.1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.1.0rc8), vantage6-server (3.1.0rc8) potentially affected by CVE-2026-73652 via vantage6 (3.1.0rc8)

vantage6 PYPI version 3.1.0rc8 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc8 - vantage6-server 3.1.0rc8 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.2.0rc1), vantage6-server (3.2.0rc1) potentially affected by CVE-2026-73652 via vantage6 (3.2.0rc1)

vantage6 PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc1 - vantage6-server 3.2.0rc1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.2.0rc3), vantage6-server (3.2.0rc3) potentially affected by CVE-2026-73652 via vantage6 (3.2.0rc3)

vantage6 PYPI version 3.2.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc3 - vantage6-server 3.2.0rc3 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.8.5), vantage6-server (3.8.5) potentially affected by CVE-2026-73652 via vantage6 (3.8.5)

vantage6 PYPI version 3.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.5 - vantage6-server 3.8.5 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.8.6), vantage6-server (3.8.6) potentially affected by CVE-2026-73652 via vantage6 (3.8.6)

vantage6 PYPI version 3.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.6 - vantage6-server 3.8.6 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...