CVE-2024-21649

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is...

vantage6-node (3.0.4), vantage6-server (3.0.4) potentially affected by CVE-2024-21649 via vantage6 (3.0.4)

vantage6 PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.4 - vantage6-server 3.0.4 Source cves: CVE-2024-21649 Source advisory: OSV:GHSA-W9H2-PX87-74VX...

vantage6-node (3.3.4), vantage6-server (3.3.4) potentially affected by CVE-2024-21649 via vantage6 (3.3.4)

vantage6 PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.4 - vantage6-server 3.3.4 Source cves: CVE-2024-21649 Source advisory: OSV:GHSA-W9H2-PX87-74VX...

vantage6-node (3.3.8a1), vantage6-server (3.3.8a1) potentially affected by CVE-2024-21649 via vantage6 (3.3.8a1)

vantage6 PYPI version 3.3.8a1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a1 - vantage6-server 3.3.8a1 Source cves: CVE-2024-21649 Source advisory: OSV:GHSA-W9H2-PX87-74VX...

vantage6-node (2.3.2rc1), vantage6-server (2.3.2rc1) potentially affected by CVE-2024-21649 via vantage6 (2.3.2rc1)

vantage6 PYPI version 2.3.2rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 2.3.2rc1 - vantage6-server 2.3.2rc1 Source cves: CVE-2024-21649 Source advisory: OSV:GHSA-W9H2-PX87-74VX...

CVE-2024-21649

creationtimestamp| type| source ---|---|--- 2024-01-30 17:21:56+00:00| seen| https://t.me/ctinow/176101...

vantage6-node (3.8.0rc3), vantage6-server (3.8.0rc3) potentially affected by CVE-2024-21649 via vantage6 (3.8.0rc3)

vantage6 PYPI version 3.8.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.0rc3 - vantage6-server 3.8.0rc3 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.11.0), vantage6-server (3.11.0) potentially affected by CVE-2024-21649 via vantage6 (3.11.0)

vantage6 PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0 - vantage6-server 3.11.0 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.10.0), vantage6-server (3.10.0) potentially affected by CVE-2024-21649 via vantage6 (3.10.0)

vantage6 PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.0 - vantage6-server 3.10.0 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (2.3.3), vantage6-server (2.3.3) potentially affected by CVE-2024-21649 via vantage6 (2.3.3)

vantage6 PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 2.3.3 - vantage6-server 2.3.3 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.1.0), vantage6-server (3.1.0) potentially affected by CVE-2024-21649 via vantage6 (3.1.0)

vantage6 PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0 - vantage6-server 3.1.0 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.1.0rc1), vantage6-server (3.1.0rc1) potentially affected by CVE-2024-21649 via vantage6 (3.1.0rc1)

vantage6 PYPI version 3.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc1 - vantage6-server 3.1.0rc1 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.4.1a0), vantage6-server (3.4.1a0) potentially affected by CVE-2024-21649 via vantage6 (3.4.1a0)

vantage6 PYPI version 3.4.1a0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1a0 - vantage6-server 3.4.1a0 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.8.8rc2), vantage6-server (3.8.8rc2) potentially affected by CVE-2024-21649 via vantage6 (3.8.8rc2)

vantage6 PYPI version 3.8.8rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc2 - vantage6-server 3.8.8rc2 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

vantage6-node (3.10.0rc1), vantage6-server (3.10.0rc1) potentially affected by CVE-2024-21649 via vantage6 (3.10.0rc1)

vantage6 PYPI version 3.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.0rc1 - vantage6-server 3.10.0rc1 Source cves: CVE-2024-21649 Source advisory: OSV:PYSEC-2024-30...

CVE-2024-21649 Remote code execution

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is...

CVE-2024-21649 Remote code execution

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is...

vantage6-node (>=0.0.0b0, <=4.2.0rc2), vantage6-server (>=0.0.0b0, <=4.2.0rc2) potentially affected by CVE-2024-21649 via vantage6 (>=0.0.0b3, <=4.2.0rc2)

vantage6 PYPI version =0.0.0b3, =0.0.0b0, =0.0.0b0, =4.2.0rc2 Source cves: CVE-2024-21649 Source advisory: MEND:CVE-2024-21649...