{"action":"Upgrade vantage6-server to 4.1.2 or later.","affected":[{"fixed":"4.1.2","introduced":"0"}],"component":"vantage6-server","cve_ids":["CVE-2023-47631"],"ecosystem":"PyPI","epss":0.00446,"exploited":false,"fixed_versions":["4.1.2"],"ghsa_id":"GHSA-vc3v-ppc7-v486","id":"tcs_01M5KGKDAHQ7P2C01829S2S5SR","modified_at":"2024-11-21T14:57:20.836905Z","published_at":"2023-11-14T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-304","https://github.com/vantage6/vantage6/security/advisories/GHSA-vc3v-ppc7-v486","https://github.com/vantage6/vantage6/commit/bf83521eb12fa80aa5fc92ef1692010a9a7f8243","https://github.com/vantage6/vantage6/blob/version/4.1.1/vantage6-node/vantage6/node/docker/docker_manager.py#L265-L268"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-304","url":"https://osv.dev/vulnerability/PYSEC-2023-304"}],"summary":"vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is al"}