vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

ImpactEdit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes. Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review PatchesNo WorkaroundsNo...

vantage6-node (4.2.0rc2), vantage6-server (4.2.0rc2) potentially affected by CVE-2026-73652 via vantage6 (4.2.0rc2)

vantage6 PYPI version 4.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.2.0rc2 - vantage6-server 4.2.0rc2 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.5.0rc3), vantage6-server (3.5.0rc3) potentially affected by CVE-2026-73652 via vantage6 (3.5.0rc3)

vantage6 PYPI version 3.5.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.0rc3 - vantage6-server 3.5.0rc3 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (4.1.0b1), vantage6-server (4.1.0b1) potentially affected by CVE-2026-73652 via vantage6 (4.1.0b1)

vantage6 PYPI version 4.1.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.1.0b1 - vantage6-server 4.1.0b1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (4.2.1), vantage6-server (4.2.1) potentially affected by CVE-2026-73652 via vantage6 (4.2.1)

vantage6 PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.2.1 - vantage6-server 4.2.1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.11.0rc1), vantage6-server (3.11.0rc1) potentially affected by CVE-2026-73652 via vantage6 (3.11.0rc1)

vantage6 PYPI version 3.11.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0rc1 - vantage6-server 3.11.0rc1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.8.7), vantage6-server (3.8.7) potentially affected by CVE-2026-73652 via vantage6 (3.8.7)

vantage6 PYPI version 3.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.7 - vantage6-server 3.8.7 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.0.0rc1), vantage6-server (3.0.0rc1) potentially affected by CVE-2026-73652 via vantage6 (3.0.0rc1)

vantage6 PYPI version 3.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.0rc1 - vantage6-server 3.0.0rc1 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-algorithm-store (4.8.0rc1), vantage6-node (4.8.0rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.8.0rc1)

vantage6 PYPI version 4.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.8.0rc1 - vantage6-node 4.8.0rc1 - vantage6-server 4.8.0rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-algorithm-store (4.11.0), vantage6-node (4.11.0) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.11.0)

vantage6 PYPI version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.11.0 - vantage6-node 4.11.0 - vantage6-server 4.11.0 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-node (3.1.0rc5), vantage6-server (3.1.0rc5) potentially affected by CVE-2026-73652 via vantage6 (3.1.0rc5)

vantage6 PYPI version 3.1.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc5 - vantage6-server 3.1.0rc5 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-algorithm-store (4.13.3), vantage6-node (4.13.3) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.13.3)

vantage6 PYPI version 4.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.3 - vantage6-node 4.13.3 - vantage6-server 4.13.3 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-370...

vantage6-node (4.0.2), vantage6-server (4.0.2) potentially affected by CVE-2026-73652 via vantage6 (4.0.2)

vantage6 PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.0.2 - vantage6-server 4.0.2 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.3.0), vantage6-server (3.3.0) potentially affected by CVE-2026-73652 via vantage6 (3.3.0)

vantage6 PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0 - vantage6-server 3.3.0 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-algorithm-store (4.3.2rc2), vantage6-node (4.3.2rc2) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.3.2rc2)

vantage6 PYPI version 4.3.2rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.3.2rc2 - vantage6-node 4.3.2rc2 - vantage6-server 4.3.2rc2 Source cves: CVE-2026-73652 Source advisory:...

vantage6-node (3.4.0a3), vantage6-server (3.4.0a3) potentially affected by CVE-2026-73652 via vantage6 (3.4.0a3)

vantage6 PYPI version 3.4.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.0a3 - vantage6-server 3.4.0a3 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (4.1.0b0), vantage6-server (4.1.0b0) potentially affected by CVE-2026-73652 via vantage6 (4.1.0b0)

vantage6 PYPI version 4.1.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.1.0b0 - vantage6-server 4.1.0b0 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.3.7), vantage6-server (3.3.7) potentially affected by CVE-2026-73652 via vantage6 (3.3.7)

vantage6 PYPI version 3.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.7 - vantage6-server 3.3.7 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-node (3.5.2), vantage6-server (3.5.2) potentially affected by CVE-2026-73652 via vantage6 (3.5.2)

vantage6 PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.2 - vantage6-server 3.5.2 Source cves: CVE-2026-73652 Source advisory: OSV:PYSEC-2026-3703...

vantage6-algorithm-store (4.12.3rc1), vantage6-node (4.12.3rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.12.3rc1)

vantage6 PYPI version 4.12.3rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.12.3rc1 - vantage6-node 4.12.3rc1 - vantage6-server 4.12.3rc1 Source cves: CVE-2026-73652 Source advisory:...