HIGH 8.8
PYSEC-2024-30
상세
The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is patched in 4.2.0.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / vantage6
최초 영향 버전:
0 수정 버전: eac19db737145d3ca987adf037a454fae0790ddd 수정
pip install --upgrade 'vantage6>=eac19db737145d3ca987adf037a454fae0790ddd'