{"action":"Upgrade vantage6 to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"vantage6","cve_ids":["CVE-2023-41881"],"ecosystem":"PyPI","epss":0.00354,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-rf54-7qrr-96j6","id":"tcs_01M5KFXTS1BMFKS1SHS9XKCZ04","modified_at":"2026-09-10T03:49:24.763224817Z","published_at":"2023-10-16T14:31:39Z","references":["https://osv.dev/vulnerability/GHSA-rf54-7qrr-96j6","https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6","https://nvd.nist.gov/vuln/detail/CVE-2023-41881","https://github.com/vantage6/vantage6/pull/748","https://github.com/vantage6/vantage6/commit/cce9538f8b70e814c080dd0ae43b297f3af8a732","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2023-200.yaml","https://github.com/vantage6/vantage6","https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-rf54-7qrr-96j6","url":"https://osv.dev/vulnerability/GHSA-rf54-7qrr-96j6"}],"summary":"vantage6 does not properly delete linked resources when deleting a collaboration"}