vantage6-algorithm-store (4.7.1rc1), vantage6-node (4.7.1rc1) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.7.1rc1)

vantage6 PYPI version 4.7.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.7.1rc1 - vantage6-node 4.7.1rc1 - vantage6-server 4.7.1rc1 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.9.0), vantage6-node (4.9.0) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.9.0)

vantage6 PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.9.0 - vantage6-node 4.9.0 - vantage6-server 4.9.0 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ6...

vantage6-algorithm-store (4.10.0rc3), vantage6-node (4.10.0rc3) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.10.0rc3)

vantage6 PYPI version 4.10.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.10.0rc3 - vantage6-node 4.10.0rc3 - vantage6-server 4.10.0rc3 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.11.0rc3), vantage6-node (4.11.0rc3) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.11.0rc3)

vantage6 PYPI version 4.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.11.0rc3 - vantage6-node 4.11.0rc3 - vantage6-server 4.11.0rc3 Source cves: CVE-2024-24769 Source advisory:...

vantage6-node (3.10.4), vantage6-server (3.10.4) potentially affected by CVE-2024-24769 via vantage6 (3.10.4)

vantage6 PYPI version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.10.4 - vantage6-server 3.10.4 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.3.8a2), vantage6-server (3.3.8a2) potentially affected by CVE-2024-24769 via vantage6 (3.3.8a2)

vantage6 PYPI version 3.3.8a2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a2 - vantage6-server 3.3.8a2 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (4.0.0), vantage6-server (4.0.0) potentially affected by CVE-2024-24769 via vantage6 (4.0.0)

vantage6 PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 4.0.0 - vantage6-server 4.0.0 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.2.0rc5), vantage6-server (3.2.0rc5) potentially affected by CVE-2024-24769 via vantage6 (3.2.0rc5)

vantage6 PYPI version 3.2.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc5 - vantage6-server 3.2.0rc5 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-algorithm-store (4.5.5), vantage6-server (4.5.5) potentially affected by CVE-2024-24769 via vantage6 (4.5.5)

vantage6 PYPI version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.5.5 - vantage6-server 4.5.5 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-node (3.8.8rc1), vantage6-server (3.8.8rc1) potentially affected by CVE-2024-24769 via vantage6 (3.8.8rc1)

vantage6 PYPI version 3.8.8rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc1 - vantage6-server 3.8.8rc1 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

vantage6-algorithm-store (4.13.0), vantage6-node (4.13.0) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.0)

vantage6 PYPI version 4.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.0 - vantage6-node 4.13.0 - vantage6-server 4.13.0 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.13.5), vantage6-node (4.13.5) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.5)

vantage6 PYPI version 4.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.5 - vantage6-node 4.13.5 - vantage6-server 4.13.5 Source cves: CVE-2024-24769 Source advisory:...

vantage6-algorithm-store (4.13.4), vantage6-node (4.13.4) +1 more potentially affected by CVE-2024-24769 via vantage6 (4.13.4)

vantage6 PYPI version 4.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.13.4 - vantage6-node 4.13.4 - vantage6-server 4.13.4 Source cves: CVE-2024-24769 Source advisory:...

vantage6-node (3.5.1), vantage6-server (3.5.1) potentially affected by CVE-2024-24769 via vantage6 (3.5.1)

vantage6 PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.1 - vantage6-server 3.5.1 Source cves: CVE-2024-24769 Source advisory: OSV:GHSA-5549-C5Q7-FJ65...

EUVD-2025-18201

Malicious code in bioql PyPI...

Vantage6 Server JWT secret not cryptographically secure

Impact The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent Patches No Workarounds You may define JWT secret key in the server configuration file...

GHSA-M3MQ-F375-5VGH Vantage6 Server JWT secret not cryptographically secure

Impact The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent Patches No Workarounds You may define JWT secret key in the server configuration file...

Insecure Randomness

Overview vantage6-server is a Vantage6 server Affected versions of this package are vulnerable to Insecure Randomness via the configureflask function, due to the predictable nature of the auto-generated secret key, an attacker can determine it and forge valid security tokens. This allows them to...

CVE-2025-43866 Vantage6 Server JWT secret not cryptographically secure

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is...

CVE-2025-43866 Vantage6 Server JWT secret not cryptographically secure

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is...