{"action":"Upgrade vantage6-server to 4.1.2 or later.","affected":[{"fixed":"4.1.2","introduced":"0"}],"component":"vantage6-server","cve_ids":["CVE-2023-47631"],"ecosystem":"PyPI","epss":0.00446,"exploited":false,"fixed_versions":["4.1.2"],"ghsa_id":"GHSA-vc3v-ppc7-v486","id":"tcs_01M5KFZVBH08FX3Q2PT2VRB44B","modified_at":"2026-09-10T03:49:59.258372908Z","published_at":"2023-11-14T22:21:57Z","references":["https://osv.dev/vulnerability/GHSA-vc3v-ppc7-v486","https://github.com/vantage6/vantage6/security/advisories/GHSA-vc3v-ppc7-v486","https://nvd.nist.gov/vuln/detail/CVE-2023-47631","https://github.com/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-node/PYSEC-2023-303.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/vantage6-server/PYSEC-2023-304.yaml","https://github.com/vantage6/vantage6","https://github.com/vantage6/vantage6/blob/version/4.1.1/vantage6-node/vantage6/node/docker/docker_manager.py#L265-L268"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-vc3v-ppc7-v486","url":"https://osv.dev/vulnerability/GHSA-vc3v-ppc7-v486"}],"summary":"vantage6-server node accepts non-whitelisted algorithms from malicious server"}