HIGH 7.5
PYSEC-2025-221
상세
vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is fixed in 4.11.0.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.