vantage6-node (3.2.0rc2), vantage6-server (3.2.0rc2) potentially affected by CVE-2023-28635 via vantage6 (3.2.0rc2)

vantage6 PYPI version 3.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc2 - vantage6-server 3.2.0rc2 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.2.0rc4), vantage6-server (3.2.0rc4) potentially affected by CVE-2023-28635 via vantage6 (3.2.0rc4)

vantage6 PYPI version 3.2.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc4 - vantage6-server 3.2.0rc4 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.0rc2), vantage6-server (3.3.0rc2) potentially affected by CVE-2023-28635 via vantage6 (3.3.0rc2)

vantage6 PYPI version 3.3.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc2 - vantage6-server 3.3.0rc2 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.2.0), vantage6-server (3.2.0) potentially affected by CVE-2023-28635 via vantage6 (3.2.0)

vantage6 PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0 - vantage6-server 3.2.0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.0a0), vantage6-server (3.3.0a0) potentially affected by CVE-2023-28635 via vantage6 (3.3.0a0)

vantage6 PYPI version 3.3.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0a0 - vantage6-server 3.3.0a0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.2.0rc5), vantage6-server (3.2.0rc5) potentially affected by CVE-2023-28635 via vantage6 (3.2.0rc5)

vantage6 PYPI version 3.2.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc5 - vantage6-server 3.2.0rc5 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.0rc1), vantage6-server (3.3.0rc1) potentially affected by CVE-2023-28635 via vantage6 (3.3.0rc1)

vantage6 PYPI version 3.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc1 - vantage6-server 3.3.0rc1 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

aioambient (1.0.2), firex-flame (>=2.1.0, <=2.5.35) +2 more potentially affected by CVE-2026-48802 via python-engineio (3.10.0)

python-engineio PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.0.2 - firex-flame =2.1.0, =2.2.3, =2.2.3, =2.3.5 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ...

aioambient (1.0.2), firex-flame (>=2.1.0, <=2.5.35) +2 more potentially affected by CVE-2026-48809 via python-engineio (3.10.0)

python-engineio PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.0.2 - firex-flame =2.1.0, =2.2.3, =2.2.3, =2.3.5 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH...

vantage6-algorithm-store (>=4.3.0b3, <=5.0.0rc91), vantage6-hq (>=5.0.0b2, <=5.0.0rc91) +2 more potentially affected by CVE-2026-54533 via vantage6 (>=0.0.0b3, <=5.0.0rc91)

vantage6 PYPI version =0.0.0b3, =4.3.0b3, =5.0.0b2, =0.0.0b0, =0.0.0b0, =5.0.0b1 Source cves: CVE-2026-54533 Source advisory: MEND:CVE-2026-54533...

CVE-2026-54533 vantage6 node has an Improper Access Control issue

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to...

vantage6-algorithm-store (>=4.3.0b3, <=5.0.0rc91), vantage6-hq (>=5.0.0b2, <=5.0.0rc91) +2 more potentially affected by CVE-2026-54445 via vantage6 (>=0.0.0b3, <=5.0.0rc91)

vantage6 PYPI version =0.0.0b3, =4.3.0b3, =5.0.0b2, =0.0.0b0, =0.0.0b0, =5.0.0b1 Source cves: CVE-2026-54445 Source advisory: MEND:CVE-2026-54445...

vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

vantage6-node (3.3.8a2), vantage6-server (3.3.8a2) potentially affected by CVE-2026-54533 via vantage6 (3.3.8a2)

vantage6 PYPI version 3.3.8a2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a2 - vantage6-server 3.3.8a2 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.3.7), vantage6-server (3.3.7) potentially affected by CVE-2026-54533 via vantage6 (3.3.7)

vantage6 PYPI version 3.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.7 - vantage6-server 3.3.7 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.3.8a1), vantage6-server (3.3.8a1) potentially affected by CVE-2026-54533 via vantage6 (3.3.8a1)

vantage6 PYPI version 3.3.8a1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a1 - vantage6-server 3.3.8a1 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.8.7rc1), vantage6-server (3.8.7rc1) potentially affected by CVE-2026-54533 via vantage6 (3.8.7rc1)

vantage6 PYPI version 3.8.7rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.7rc1 - vantage6-server 3.8.7rc1 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.8.7), vantage6-server (3.8.7) potentially affected by CVE-2026-54533 via vantage6 (3.8.7)

vantage6 PYPI version 3.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.7 - vantage6-server 3.8.7 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.8.8rc2), vantage6-server (3.8.8rc2) potentially affected by CVE-2026-54533 via vantage6 (3.8.8rc2)

vantage6 PYPI version 3.8.8rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc2 - vantage6-server 3.8.8rc2 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...

vantage6-node (3.7.0rc1), vantage6-server (3.7.0rc1) potentially affected by CVE-2026-54533 via vantage6 (3.7.0rc1)

vantage6 PYPI version 3.7.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.0rc1 - vantage6-server 3.7.0rc1 Source cves: CVE-2026-54533 Source advisory: OSV:GHSA-X9F6-9RVM-MMRG...