Skip to content
OpenAdvisories

Package · PyPI

vantage6-node

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-21653

    vantage6 insecure SSH configuration for node and server containers

    The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper…

    vantage6 vantage6 vantage6 vantage6-server PyPI
  • Medium 5.4
    CVE-2023-28635

    Defining resource name as integer in vantage6 may give unintended access

    vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when u…

    vantage6 vantage6 vantage6 vantage6-node PyPI