Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

vantage6-server

5 known vulnerabilities (1 high, 2 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high, 2 medium, 2 low
Registry
PyPI

Advisories 5

  • Vantage6 Server JWT secret not cryptographically secure

    Affected: fixed in 4.11.0.

  • CVE-2024-23823Medium 4.2

    CORS settings overly permissive in vantage6

    Affected: fixed in 4.2.1.

  • vantage6 username timing attack

    Affected: fixed in 4.2.0.

  • CVE-2024-21653Medium 6.5

    vantage6 insecure SSH configuration for node and server containers

    Affected: fixed in 4.2.0.

  • vantage6 Node accepts non-whitelisted algorithms from malicious server

    Affected: fixed in 4.1.2.