Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
vantage6 Vantage6: 2FA can be circumvented with hacked email access Medium Risk 6.0 5 months ago 20 hours ago
vantage6 Vantage6: No limit on emails sent for password/MFA reset Low Risk 3.0 5 months ago 20 hours ago
vantage6 vantage6 collaboration admins can extend their influence by expanding the collaboration Low Risk 2.7 2 years ago 1 month ago
vantage6 vantage6's CORS settings overly permissive Medium Risk 4.2 2 years ago 1 month ago
vantage6 vantage6 remote code execution vulnerability High Risk 8.8 2 years ago 1 month ago
vantage6 vantage6 may create unencrypted tasks in encrypted collaboration Low Risk 3.5 2 years ago 1 month ago
vantage6 vantage6 has insecure SSH configuration for node and server containers Medium Risk 6.5 2 years ago 1 month ago
vantage6-node vantage6-server node accepts non-whitelisted algorithms from malicious server High Risk 7.2 2 years ago 1 month ago
vantage6-server vantage6-server node accepts non-whitelisted algorithms from malicious server High Risk 7.2 2 years ago 1 month ago
vantage6 Pickle serialization vulnerable to Deserialization of Untrusted Data High Risk 7.2 3 years ago 1 month ago
vantage6 Defining resource name as integer may give unintended access in vantage6 Medium Risk 5.4 3 years ago 1 month ago
vantage6 vantage6 vulnerable to Improper Preservation of Permissions Medium Risk 6.5 3 years ago 1 month ago
vantage6 vantage6 refresh tokens do not expire High Risk 8.8 3 years ago 1 month ago
vantage6 vantage6 does not properly delete linked resources when deleting a collaboration Low Risk 3.7 3 years ago 1 month ago
vantage6 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review High Risk 8.0 3 months ago 2 months ago
vantage6 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review Unknown 2 months ago 2 months ago
vantage6 Vantage6: Set admin user and password from environment or configuration Medium Risk 6.0 5 months ago 3 months ago
vantage6 vantage6 node has an Improper Access Control issue Medium Risk 6.0 5 months ago 3 months ago
vantage6 Vantage6: 2FA can be circumvented with hacked email access Unknown 3 months ago 3 months ago
vantage6 Vantage6: No limit on emails sent for password/MFA reset Unknown 3 months ago 3 months ago
vantage6 Vantage6: Set admin user and password from environment or configuration Unknown 3 months ago 3 months ago
vantage6 vantage6 node has an Improper Access Control issue Unknown 3 months ago 3 months ago
vantage6-server No summary available Medium Risk 6.5 2 years ago 3 months ago
vantage6 vantage6's CORS settings overly permissive Medium Risk 4.2 4 months ago 3 months ago
vantage6 vantage6 vulnerable to Observable Response Discrepancy Medium Risk 6.5 3 years ago 3 months ago
vantage6 No summary available Unknown 3 years ago 3 months ago
vantage6-node No summary available Medium Risk 5.4 3 years ago 3 months ago
vantage6 Defining resource name as integer may give unintended access in vantage6 Medium Risk 5.4 4 months ago 3 months ago
vantage6-server vantage6 vulnerable to username timing attack Low Risk 3.7 2 years ago 3 months ago
vantage6 No summary available Low Risk 3.7 2 years ago 3 months ago
vantage6-server vantage6 vulnerable to username timing attack Low Risk 3.7 4 months ago 3 months ago
vantage6-node No summary available Critical 9.8 2 years ago 3 months ago
vantage6-server No summary available Critical 9.8 2 years ago 3 months ago
vantage6 vantage6 has insecure SSH configuration for node and server containers Medium Risk 6.5 4 months ago 3 months ago
vantage6 vantage6 vulnerable to a username timing attack on recover password/MFA token Medium Risk 5.3 2 years ago 3 months ago
vantage6 vantage6 vulnerable to a username timing attack on recover password/MFA token Medium Risk 5.3 4 months ago 3 months ago
vantage6 vantage6 collaboration admins can extend their influence by expanding the collaboration Low Risk 2.7 4 months ago 3 months ago
vantage6-server Vantage6 Server JWT secret not cryptographically secure Low Risk 3.0 1 year ago 4 months ago
vantage6 vantage6 lacks brute-force protection on change password functionality Low Risk 3.0 1 year ago 4 months ago
vantage6 No summary available Critical 9.8 1 year ago 5 months ago
vantage6-server No summary available High Risk 7.5 1 year ago 5 months ago
vantage6-node No summary available High Risk 8.8 2 years ago 1 year ago
vantage6-server No summary available High Risk 8.8 2 years ago 1 year ago
vantage6 Improper Access Control in vantage6 Medium Risk 5.4 3 years ago 1 year ago
vantage6 No summary available High Risk 8.8 2 years ago 2 years ago
vantage6 No summary available Medium Risk 4.3 2 years ago 2 years ago
vantage6 No summary available Medium Risk 4.3 3 years ago 2 years ago
vantage6 No summary available Medium Risk 4.3 3 years ago 2 years ago
vantage6 No summary available High Risk 7.2 3 years ago 2 years ago
vantage6 No summary available Unknown 3 years ago 2 years ago