{"action":"Upgrade vantage6 to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"vantage6","cve_ids":["CVE-2023-41881"],"ecosystem":"PyPI","epss":0.00354,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-rf54-7qrr-96j6","id":"tcs_01M5KGJV9XC4FP5K3GGXG5N18E","modified_at":"2023-11-08T04:13:26.641446Z","published_at":"2023-10-11T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-200","https://github.com/vantage6/vantage6/pull/748","https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400","https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2023-200","url":"https://osv.dev/vulnerability/PYSEC-2023-200"}],"summary":"vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to man"}