vantage6 has insecure SSH configuration for node and server containers
Modified: 2/16/2024
package
pkg:pypi/vantage6
vantage6 has insecure SSH configuration for node and server containers
Modified: 2/16/2024
vantage6 vulnerable to Observable Response Discrepancy
Modified: 5/29/2026
vantage6's CORS settings overly permissive
Modified: 3/15/2024
vantage6 refresh tokens do not expire
Modified: 11/18/2024
vantage6 vulnerable to a username timing attack on recover password/MFA token
Modified: 2/4/2026
Pickle serialization vulnerable to Deserialization of Untrusted Data
Modified: 11/18/2024
Defining resource name as integer may give unintended access in vantage6
Modified: 11/18/2024
vantage6 collaboration admins can extend their influence by expanding the collaboration
Modified: 5/23/2024
Improper Access Control in vantage6
Modified: 11/18/2024
vantage6 lacks brute-force protection on change password functionality
Modified: 5/20/2026
vantage6 does not properly delete linked resources when deleting a collaboration
Modified: 11/18/2024
vantage6 may create unencrypted tasks in encrypted collaboration
Modified: 2/16/2024
vantage6 vulnerable to Improper Preservation of Permissions
Modified: 11/18/2024
vantage6 remote code execution vulnerability
Modified: 2/16/2024
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 5/21/2026
Modified: 5/19/2026
Modified: 11/8/2023
Modified: 11/8/2023
Modified: 2/8/2024
Modified: 1/14/2025
Modified: 2/8/2024
Modified: 5/20/2026