PyPI/vantage6-server CVE-2025-43866: high 7.5, EPSS 0.39%
vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, wh
Action: Upgrade vantage6-server to 4.11.0 or later.
pip install vantage6-server==4.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.11.0 | - |
Fixed versions
| 4.11.0 |
Sources
CVE-2025-43866 · published · modified · JSON