Missing Authorization

Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Missing Authorization in the default tasks/list, tasks/get, tasks/result, and tasks/cancel handlers installed by server.experimental.enabletasks, which act on a task by its identifier without checking...

PYSEC-2026-2007 vantage6 collaboration admins can extend their influence by expanding the collaboration

Impact Collaboration administrators can add extra organizations to their collaboration. When doing that, they extend their influence: for instance, for organizations that they include, they can then create new users for which they know the passwords, and use that to read task results of other...

PT-2024-25015

Name of the Vulnerable Software and Affected Versions vantage6 versions prior to 4.5.0rc3 Description The issue allows collaboration administrators to add extra organizations to their collaboration, extending their influence. They can create new users for which they know the passwords and use thi...