Description
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| vantage6 | vantage6 | < 3.8.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | vantage6 | < 3.8.0 | 3.8.0 | GHSA-4w59-c3gc-rrhp |