Vulnerability GHSA-47w6-gwp4-w6vc
High Risk
HIGH RISK
CVSS Score: 8.0
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 months ago
July 24, 2026 at 09:49 PM UTC
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
0.0.0b0 - 5.0.2
0.0.0b0 - 5.0.2
Summary
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
Details
Impact
Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes.
Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review
Patches
No
Workarounds
No
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
0.0.0b0 - 5.0.2 PYSEC-2026-3703
0.0.0b0 - 5.0.2 PYSEC-2026-3703
Unknown
3 months ago
Vantage6: Set admin user and password from environment or configuration
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3400
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3400
Unknown
3 months ago
vantage6 node has an Improper Access Control issue
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3401
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3401
Unknown
3 months ago
Vantage6: 2FA can be circumvented with hacked email access
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3398
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3398
Unknown
3 months ago
Vantage6: No limit on emails sent for password/MFA reset
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3399
0.0.0b0 - 5.0.0rc91 PYSEC-2026-3399
Impacted packages
Timeline
Published
3 months ago
July 24, 2026 at 09:49 PM UTC
Last Modified
2 months ago
August 19, 2026 at 12:55 PM UTC