LOW 3.7
PYSEC-2024-31
상세
The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
PyPI / vantage6
최초 영향 버전:
0 수정 버전: 389f416c445da4f2438c72f34c3b1084485c4e30 수정
pip install --upgrade 'vantage6>=389f416c445da4f2438c72f34c3b1084485c4e30'