MEDIUM6.5PyPI
GHSA-2wgc-48g2-cj5w· CVE-2024-21653, PYSEC-2024-33vantage6 has insecure SSH configuration for node and server containers
Modified: 9/10/2026
package
PyPI/vantage6
pkg:pypi/vantage6
MEDIUM6.5PyPI
GHSA-36gx-9q6h-g429· CVE-2022-39228, PYSEC-2023-52vantage6 vulnerable to Observable Response Discrepancy
Modified: 7/9/2026
HIGHPyPI
GHSA-47w6-gwp4-w6vc· CVE-2026-73652, PYSEC-2026-3703vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Modified: 8/19/2026
MEDIUM4.2PyPI
GHSA-4946-85pr-fvxh· CVE-2024-23823, PYSEC-2024-326vantage6's CORS settings overly permissive
Modified: 9/10/2026
MEDIUMPyPI
GHSA-4c5c-2vc3-x5w2· CVE-2024-27928, PYSEC-2026-3398Vantage6: 2FA can be circumvented with hacked email access
Modified: 7/13/2026
HIGH8.8PyPI
GHSA-4w59-c3gc-rrhp· CVE-2023-23929, PYSEC-2023-54vantage6 refresh tokens do not expire
Modified: 9/10/2026
LOWPyPI
GHSA-5549-c5q7-fj65· CVE-2024-24769, PYSEC-2026-3399Vantage6: No limit on emails sent for password/MFA reset
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-5h3x-6gwf-73jm· CVE-2024-24770, PYSEC-2026-2005vantage6 vulnerable to a username timing attack on recover password/MFA token
Modified: 7/7/2026
HIGH7.2PyPI
GHSA-5m22-cfq9-86x6· CVE-2023-23930, PYSEC-2023-196Pickle serialization vulnerable to Deserialization of Untrusted Data
Modified: 9/10/2026
MEDIUM5.4PyPI
GHSA-7x94-6g2m-3hp2· CVE-2023-28635, PYSEC-2023-198Defining resource name as integer may give unintended access in vantage6
Modified: 9/10/2026
LOW2.7PyPI
GHSA-99r4-cjp4-3hmx· CVE-2024-32969, PYSEC-2026-2007vantage6 collaboration admins can extend their influence by expanding the collaboration
Modified: 9/10/2026
MEDIUMPyPI
GHSA-fgmc-2hqj-86v4· CVE-2026-54445, PYSEC-2026-3400Vantage6: Set admin user and password from environment or configuration
Modified: 7/13/2026
MEDIUM5.4PyPI
GHSA-gc57-xhh5-m94r· CVE-2023-41882, PYSEC-2023-201Improper Access Control in vantage6
Modified: 11/18/2024
LOWPyPI
GHSA-j6g5-p62x-58hw· CVE-2025-43863, PYSEC-2025-220vantage6 lacks brute-force protection on change password functionality
Modified: 6/8/2026
LOW3.7PyPI
GHSA-rf54-7qrr-96j6· CVE-2023-41881, PYSEC-2023-200vantage6 does not properly delete linked resources when deleting a collaboration
Modified: 9/10/2026
LOW3.5PyPI
GHSA-rjmv-52mp-gjrr· CVE-2024-22193, PYSEC-2024-32vantage6 may create unencrypted tasks in encrypted collaboration
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-vvjv-97j8-94xh· CVE-2023-22738, PYSEC-2023-53vantage6 vulnerable to Improper Preservation of Permissions
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-w9h2-px87-74vx· CVE-2024-21649, PYSEC-2024-30vantage6 remote code execution vulnerability
Modified: 9/10/2026
MEDIUMPyPI
GHSA-x9f6-9rvm-mmrg· CVE-2026-54533, PYSEC-2026-3401vantage6 node has an Improper Access Control issue
Modified: 7/13/2026
HIGH7.2PyPI
PYSEC-2023-196· CVE-2023-23930, GHSA-5m22-cfq9-86x6Modified: 11/8/2023
MEDIUM4.3PyPI
PYSEC-2023-200· CVE-2023-41881, GHSA-rf54-7qrr-96j6Modified: 11/8/2023
MEDIUM4.3PyPI
PYSEC-2023-201· CVE-2023-41882, GHSA-gc57-xhh5-m94rModified: 11/8/2023
—PyPI
PYSEC-2023-52· CVE-2022-39228, GHSA-36gx-9q6h-g429Modified: 7/9/2026
—PyPI
PYSEC-2023-53· CVE-2023-22738, GHSA-vvjv-97j8-94xhModified: 11/8/2023
—PyPI
PYSEC-2023-54· CVE-2023-23929, GHSA-4w59-c3gc-rrhpModified: 11/8/2023
HIGH8.8PyPI
PYSEC-2024-30· CVE-2024-21649, GHSA-w9h2-px87-74vxModified: 2/8/2024
LOW3.7PyPI
PYSEC-2024-31· CVE-2024-21671, GHSA-45gq-q4xh-cp53Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2024-32· CVE-2024-22193, GHSA-rjmv-52mp-gjrrModified: 2/8/2024
CRITICAL9.8PyPI
PYSEC-2025-220· CVE-2025-43863, GHSA-j6g5-p62x-58hwModified: 5/20/2026
MEDIUM6.5PyPI
PYSEC-2026-2003· CVE-2024-21653, GHSA-2wgc-48g2-cj5wvantage6 has insecure SSH configuration for node and server containers
Modified: 7/7/2026
MEDIUM4.2PyPI
PYSEC-2026-2004· CVE-2024-23823, GHSA-4946-85pr-fvxhvantage6's CORS settings overly permissive
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2005· CVE-2024-24770, GHSA-5h3x-6gwf-73jmvantage6 vulnerable to a username timing attack on recover password/MFA token
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-2006· CVE-2023-28635, GHSA-7x94-6g2m-3hp2Defining resource name as integer may give unintended access in vantage6
Modified: 7/7/2026
LOW2.7PyPI
PYSEC-2026-2007· CVE-2024-32969, GHSA-99r4-cjp4-3hmxvantage6 collaboration admins can extend their influence by expanding the collaboration
Modified: 7/7/2026
—PyPI
PYSEC-2026-3398· CVE-2024-27928, GHSA-4c5c-2vc3-x5w2Vantage6: 2FA can be circumvented with hacked email access
Modified: 7/13/2026
—PyPI
PYSEC-2026-3399· CVE-2024-24769, GHSA-5549-c5q7-fj65Vantage6: No limit on emails sent for password/MFA reset
Modified: 7/13/2026
—PyPI
PYSEC-2026-3400· CVE-2026-54445, GHSA-fgmc-2hqj-86v4Vantage6: Set admin user and password from environment or configuration
Modified: 7/13/2026
—PyPI
PYSEC-2026-3401· CVE-2026-54533, GHSA-x9f6-9rvm-mmrgvantage6 node has an Improper Access Control issue
Modified: 7/13/2026
—PyPI
PYSEC-2026-3703· CVE-2026-73652, GHSA-47w6-gwp4-w6vcvantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Modified: 8/19/2026