Skip to content
OpenAdvisories

Package · PyPI

vantage6-server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.7
    CVE-2025-43866

    Vantage6 Server JWT secret not cryptographically secure

    vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to…

    vantage6 vantage6 vantage6-server PyPI
  • Low 3.7
    CVE-2024-21671

    vantage6 username timing attack

    The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in cred…

    vantage6 vantage6 vantage6 vantage6-server PyPI