pypi

vantage6

40 Total advisories

40 Vulnerabilities

0 Malware

Dependency scanning

Check whether vantage6 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

vantage6

Vulnerabilities

vantage6 collaboration admins can extend their influence by expanding the collaboration

vantage6's CORS settings overly permissive

vantage6 remote code execution vulnerability

vantage6 may create unencrypted tasks in encrypted collaboration

vantage6 has insecure SSH configuration for node and server containers

Defining resource name as integer may give unintended access in vantage6

Pickle serialization vulnerable to Deserialization of Untrusted Data

vantage6 vulnerable to Improper Preservation of Permissions

vantage6 refresh tokens do not expire

vantage6 does not properly delete linked resources when deleting a collaboration

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Vantage6: 2FA can be circumvented with hacked email access

Vantage6: Set admin user and password from environment or configuration

Vantage6: No limit on emails sent for password/MFA reset

vantage6 node has an Improper Access Control issue

vantage6 node has an Improper Access Control issue

Vantage6: Set admin user and password from environment or configuration

Vantage6: No limit on emails sent for password/MFA reset

Vantage6: 2FA can be circumvented with hacked email access

vantage6's CORS settings overly permissive

CVE-2022-39228

vantage6 vulnerable to Observable Response Discrepancy

CVE-2022-39228

Defining resource name as integer may give unintended access in vantage6

CVE-2024-21671

vantage6 has insecure SSH configuration for node and server containers

vantage6 vulnerable to a username timing attack on recover password/MFA token

vantage6 vulnerable to a username timing attack on recover password/MFA token

vantage6 collaboration admins can extend their influence by expanding the collaboration

vantage6 lacks brute-force protection on change password functionality

CVE-2025-43863

Improper Access Control in vantage6

CVE-2024-21649

CVE-2024-22193

CVE-2023-41882

CVE-2023-41881

CVE-2023-23930

CVE-2023-23929

CVE-2023-22738

Browse more PyPI advisories

Start Securing