vantage6-node (3.11.0rc3), vantage6-server (3.11.0rc3) potentially affected by CVE-2024-24770 via vantage6 (3.11.0rc3)

vantage6 PYPI version 3.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0rc3 - vantage6-server 3.11.0rc3 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.10.0), vantage6-server (3.10.0) potentially affected by CVE-2024-23823 via vantage6 (3.10.0)

vantage6 PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.0 - vantage6-server 3.10.0 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.10.4), vantage6-server (3.10.4) potentially affected by CVE-2024-24770 via vantage6 (3.10.4)

vantage6 PYPI version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.4 - vantage6-server 3.10.4 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.5.1), vantage6-server (3.5.1) potentially affected by CVE-2024-23823 via vantage6 (3.5.1)

vantage6 PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.1 - vantage6-server 3.5.1 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.4.1a1), vantage6-server (3.4.1a1) potentially affected by CVE-2024-23823 via vantage6 (3.4.1a1)

vantage6 PYPI version 3.4.1a1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1a1 - vantage6-server 3.4.1a1 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.9.0rc4), vantage6-server (3.9.0rc4) potentially affected by CVE-2024-23823 via vantage6 (3.9.0rc4)

vantage6 PYPI version 3.9.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.9.0rc4 - vantage6-server 3.9.0rc4 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.3.3), vantage6-server (3.3.3) potentially affected by CVE-2024-23823 via vantage6 (3.3.3)

vantage6 PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.3 - vantage6-server 3.3.3 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.4.1), vantage6-server (3.4.1) potentially affected by CVE-2024-24770 via vantage6 (3.4.1)

vantage6 PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1 - vantage6-server 3.4.1 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.4.0a2), vantage6-server (3.4.0a2) potentially affected by CVE-2024-24770 via vantage6 (3.4.0a2)

vantage6 PYPI version 3.4.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.0a2 - vantage6-server 3.4.0a2 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.8.8rc3), vantage6-server (3.8.8rc3) potentially affected by CVE-2024-24770 via vantage6 (3.8.8rc3)

vantage6 PYPI version 3.8.8rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc3 - vantage6-server 3.8.8rc3 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

CVE-2026-54533 vantage6 node has an Improper Access Control issue

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to...

vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

GHSA-X9F6-9RVM-MMRG vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

vantage6-node (3.11.0rc1), vantage6-server (3.11.0rc1) potentially affected by CVE-2024-24769 via vantage6 (3.11.0rc1)

vantage6 PYPI version 3.11.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0rc1 - vantage6-server 3.11.0rc1 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-algorithm-store (4.8.2), vantage6-node (4.8.2) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.8.2)

vantage6 PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.8.2 - vantage6-node 4.8.2 - vantage6-server 4.8.2 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ6...

vantage6-node (2.3.4), vantage6-server (2.3.4) potentially affected by CVE-2024-24769 via vantage6 (2.3.4)

vantage6 PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 2.3.4 - vantage6-server 2.3.4 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.4.3), vantage6-server (3.4.3) potentially affected by CVE-2024-24769 via vantage6 (3.4.3)

vantage6 PYPI version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.3 - vantage6-server 3.4.3 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.10.3), vantage6-server (3.10.3) potentially affected by CVE-2024-24769 via vantage6 (3.10.3)

vantage6 PYPI version 3.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.3 - vantage6-server 3.10.3 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (4.1.0b0), vantage6-server (4.1.0b0) potentially affected by CVE-2024-24769 via vantage6 (4.1.0b0)

vantage6 PYPI version 4.1.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.1.0b0 - vantage6-server 4.1.0b0 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.3.8a8), vantage6-server (3.3.8a8) potentially affected by CVE-2024-24769 via vantage6 (3.3.8a8)

vantage6 PYPI version 3.3.8a8 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a8 - vantage6-server 3.3.8a8 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...