Low severity3.7NVD Advisory· Published Jan 30, 2024· Updated Jun 17, 2026

CVE-2024-21671

Description

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
vantage6-serverPyPI	< 4.2.0	4.2.0

Affected products

Vantage6/Vantage62 versions
cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vantage6:vantage6:*:*:*:*:*:*:*:*range: <4.2.0
- (no CPE)range: < 4.2.0
ghsa-coords
pkg:pypi/vantage6-server
Range: < 4.2.0

Patches

Vulnerability mechanics

References

github.com/vantage6/vantage6/commit/389f416c445da4f2438c72f34c3b1084485c4e30nvdPatchWEB
github.com/advisories/GHSA-45gq-q4xh-cp53ghsaADVISORY
github.com/vantage6/vantage6/security/advisories/GHSA-45gq-q4xh-cp53nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-21671ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/vantage6/PYSEC-2024-31.yamlghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000