{"action":"Upgrade vantage6 to 3.8.0 or later.","affected":[{"fixed":"3.8.0","introduced":"0"}],"component":"vantage6","cve_ids":["CVE-2022-39228"],"ecosystem":"PyPI","epss":0.00596,"exploited":false,"fixed_versions":["3.8.0"],"ghsa_id":"GHSA-36gx-9q6h-g429","id":"tcs_01M5KEV1T293ZKNF0X4NSAV3K5","modified_at":"2026-07-09T16:56:14.695577239Z","published_at":"2023-02-28T23:18:37Z","references":["https://osv.dev/vulnerability/GHSA-36gx-9q6h-g429","https://github.com/vantage6/vantage6/security/advisories/GHSA-36gx-9q6h-g429","https://nvd.nist.gov/vuln/detail/CVE-2022-39228","https://github.com/vantage6/vantage6/issues/59","https://github.com/vantage6/vantage6/pull/281","https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-313.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-52.yaml","https://github.com/vantage6/vantage6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-36gx-9q6h-g429","url":"https://osv.dev/vulnerability/GHSA-36gx-9q6h-g429"}],"summary":"vantage6 vulnerable to Observable Response Discrepancy"}