Executive brief
vantage6 vulnerable to username timing attack
Affected products
- PyPI vantage6
- PyPI vantage6-server
Junglewise Threat Intelligence
CVE-2024-21671: PYSEC-2026-2008 - vantage6 vulnerable to username timing attack
CVE-2024-21671 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: vantage6 (PyPI), vantage6-server (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3703 - vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review
- vantage6 incorrect authorization in algorithm review process
- PYSEC-2026-2007 - vantage6 collaboration admins can extend their influence by expanding the collaboration
- PYSEC-2026-2005 - vantage6 vulnerable to a username timing attack on recover password/MFA token
- PYSEC-2026-2004 - vantage6's CORS settings overly permissive