vantage6-algorithm-store (4.11.0rc4), vantage6-node (4.11.0rc4) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.11.0rc4)

vantage6 PYPI version 4.11.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.11.0rc4 - vantage6-node 4.11.0rc4 - vantage6-server 4.11.0rc4 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.13.0rc3), vantage6-node (4.13.0rc3) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.13.0rc3)

vantage6 PYPI version 4.13.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0rc3 - vantage6-node 4.13.0rc3 - vantage6-server 4.13.0rc3 Source cves: CVE-2024-27928 Source advisory:...

vantage6-algorithm-store (4.10.2), vantage6-node (4.10.2) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.10.2)

vantage6 PYPI version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.10.2 - vantage6-node 4.10.2 - vantage6-server 4.10.2 Source cves: CVE-2024-27928 Source advisory: OSV:PYSEC-2026-339...

vantage6-algorithm-store (4.6.0rc6), vantage6-node (4.6.0rc6) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.6.0rc6)

vantage6 PYPI version 4.6.0rc6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.6.0rc6 - vantage6-node 4.6.0rc6 - vantage6-server 4.6.0rc6 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.3.4rc3), vantage6-node (4.3.4rc3) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.3.4rc3)

vantage6 PYPI version 4.3.4rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.4rc3 - vantage6-node 4.3.4rc3 - vantage6-server 4.3.4rc3 Source cves: CVE-2024-27928 Source advisory:...

vantage6-algorithm-store (4.5.0), vantage6-node (4.5.0) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.5.0)

vantage6 PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.5.0 - vantage6-node 4.5.0 - vantage6-server 4.5.0 Source cves: CVE-2024-27928 Source advisory: OSV:PYSEC-2026-3398...

vantage6-algorithm-store (4.7.0), vantage6-node (4.7.0) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.7.0)

vantage6 PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.0 - vantage6-node 4.7.0 - vantage6-server 4.7.0 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.3.2rc2), vantage6-node (4.3.2rc2) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.3.2rc2)

vantage6 PYPI version 4.3.2rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.2rc2 - vantage6-node 4.3.2rc2 - vantage6-server 4.3.2rc2 Source cves: CVE-2024-27928 Source advisory:...

vantage6-algorithm-store (4.7.1), vantage6-node (4.7.1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.7.1)

vantage6 PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.1 - vantage6-node 4.7.1 - vantage6-server 4.7.1 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.3.0rc1), vantage6-node (4.3.0rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.3.0rc1)

vantage6 PYPI version 4.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.0rc1 - vantage6-node 4.3.0rc1 - vantage6-server 4.3.0rc1 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.13.3rc2), vantage6-node (4.13.3rc2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.3rc2)

vantage6 PYPI version 4.13.3rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3rc2 - vantage6-node 4.13.3rc2 - vantage6-server 4.13.3rc2 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.6.0rc7), vantage6-node (4.6.0rc7) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.6.0rc7)

vantage6 PYPI version 4.6.0rc7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.6.0rc7 - vantage6-node 4.6.0rc7 - vantage6-server 4.6.0rc7 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (>=5.0.0a0, <=5.0.0rc91), vantage6-hq (>=5.0.0b2, <=5.0.0rc91) +2 more potentially affected by CVE-2024-24769 via vantage6 (>=5.0.0a0, <=5.0.0rc91)

vantage6 PYPI version =5.0.0a0, =5.0.0a0, =5.0.0b2, =5.0.0a0, =5.0.0a0, =5.0.0b1 Source cves: CVE-2024-24769 Source advisory: OSV:PYSEC-2026-3399...

vantage6-algorithm-store (4.6.1), vantage6-node (4.6.1) +1 more potentially affected by CVE-2024-27928 via vantage6 (4.6.1)

vantage6 PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.6.1 - vantage6-node 4.6.1 - vantage6-server 4.6.1 Source cves: CVE-2024-27928 Source advisory: OSV:PYSEC-2026-3398...

vantage6-algorithm-store (4.9.0rc1), vantage6-node (4.9.0rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.9.0rc1)

vantage6 PYPI version 4.9.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.9.0rc1 - vantage6-node 4.9.0rc1 - vantage6-server 4.9.0rc1 Source cves: CVE-2024-24769 Source advisory:...

Paramiko rsakey.py allows the SHA-1 algorithm

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

PYSEC-2026-2592 lightrag-hku: JWT Algorithm Confusion Vulnerability

Summary The LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. Since the jwt.decode call does not explicitly deny the 'none' algorithm, a crafted token without a signature will be accepted as valid,...

lightrag-hku: JWT Algorithm Confusion Vulnerability

SummaryThe LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. Since the jwt.decode call does not explicitly deny the 'none' algorithm, a crafted token without a signature will be accepted as valid, leadi...

PT-2026-60013

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

ROS-20260713-73-0032

The vulnerability in Python-Relenv relates to the choice of a less secure algorithm during negotiation processes. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...