📦 Vantage6

This vulnerability in vantage6 allows attackers with authenticated access to brute-force user passwords through unlimited attempts at the change password endpoint. It affects all vantage6 deployments ...

CVE-2024-21649 is a code injection vulnerability in vantage6 privacy-enhancing technology platforms that allows authenticated users to execute arbitrary code via algorithm environment variables. This ...

This vulnerability in vantage6 allows indefinite refresh token validity, enabling attackers with stolen tokens to maintain persistent unauthorized access to the federated learning infrastructure. All ...