vantage6-node (3.11.0rc3), vantage6-server (3.11.0rc3) potentially affected by CVE-2024-24770 via vantage6 (3.11.0rc3)

vantage6 PYPI version 3.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0rc3 - vantage6-server 3.11.0rc3 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.8.1), vantage6-server (3.8.1) potentially affected by CVE-2024-24770 via vantage6 (3.8.1)

vantage6 PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.1 - vantage6-server 3.8.1 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.3.0rc4), vantage6-server (3.3.0rc4) potentially affected by CVE-2024-24770 via vantage6 (3.3.0rc4)

vantage6 PYPI version 3.3.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc4 - vantage6-server 3.3.0rc4 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.3.4), vantage6-server (3.3.4) potentially affected by CVE-2024-23823 via vantage6 (3.3.4)

vantage6 PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.4 - vantage6-server 3.3.4 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.5.0), vantage6-server (3.5.0) potentially affected by CVE-2024-24770 via vantage6 (3.5.0)

vantage6 PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.0 - vantage6-server 3.5.0 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.2.0rc4), vantage6-server (3.2.0rc4) potentially affected by CVE-2024-23823 via vantage6 (3.2.0rc4)

vantage6 PYPI version 3.2.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc4 - vantage6-server 3.2.0rc4 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.7.3), vantage6-server (3.7.3) potentially affected by CVE-2024-23823 via vantage6 (3.7.3)

vantage6 PYPI version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.3 - vantage6-server 3.7.3 Source cves: CVE-2024-23823 Source advisory: OSV:PYSEC-2026-2004...

vantage6-node (3.8.5), vantage6-server (3.8.5) potentially affected by CVE-2024-24770 via vantage6 (3.8.5)

vantage6 PYPI version 3.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.5 - vantage6-server 3.8.5 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.3.0a0), vantage6-server (3.3.0a0) potentially affected by CVE-2024-24770 via vantage6 (3.3.0a0)

vantage6 PYPI version 3.3.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0a0 - vantage6-server 3.3.0a0 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

vantage6-node (3.8.3), vantage6-server (3.8.3) potentially affected by CVE-2024-24770 via vantage6 (3.8.3)

vantage6 PYPI version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.3 - vantage6-server 3.8.3 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

CVE-2026-54533 vantage6 node has an Improper Access Control issue

vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms input and output files. Version 5.0.0 fixes the issue. As a workaround, verify and restrict the algorithm containers that are allowed to...

vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

GHSA-X9F6-9RVM-MMRG vantage6 node has an Improper Access Control issue

Impact Malicious algorithms can potentially access other algorithms input and output files. Patches Todo Workarounds Verify and restrict the algorithm containers that are allowed to run on your node. See here on how to do this. References https://docs.vantage6.ai/usage/running-the-node/security F...

vantage6-node (3.6.1rc2), vantage6-server (3.6.1rc2) potentially affected by CVE-2024-24769 via vantage6 (3.6.1rc2)

vantage6 PYPI version 3.6.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.6.1rc2 - vantage6-server 3.6.1rc2 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-algorithm-store (4.13.6), vantage6-node (4.13.6) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.6)

vantage6 PYPI version 4.13.6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.6 - vantage6-node 4.13.6 - vantage6-server 4.13.6 Source cves: CVE-2024-24769 Source advisory:...

vantage6-node (3.8.8rc1), vantage6-server (3.8.8rc1) potentially affected by CVE-2024-24769 via vantage6 (3.8.8rc1)

vantage6 PYPI version 3.8.8rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc1 - vantage6-server 3.8.8rc1 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.0.0b8), vantage6-server (3.0.0b8) potentially affected by CVE-2024-24769 via vantage6 (3.0.0b8)

vantage6 PYPI version 3.0.0b8 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.0b8 - vantage6-server 3.0.0b8 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.3.8a2), vantage6-server (3.3.8a2) potentially affected by CVE-2024-24769 via vantage6 (3.3.8a2)

vantage6 PYPI version 3.3.8a2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a2 - vantage6-server 3.3.8a2 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-algorithm-store (4.4.0rc3), vantage6-node (4.4.0rc3) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.4.0rc3)

vantage6 PYPI version 4.4.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.4.0rc3 - vantage6-node 4.4.0rc3 - vantage6-server 4.4.0rc3 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.7.1rc1), vantage6-node (4.7.1rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.7.1rc1)

vantage6 PYPI version 4.7.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.1rc1 - vantage6-node 4.7.1rc1 - vantage6-server 4.7.1rc1 Source cves: CVE-2024-24769 Source advisory:...