https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:42:52.761079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244240 EUVD-2026-244240 2026-10-05T23:42:52.827424+00:00 EUVD-2026-244240 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43866 fkie_cve-2025-43866 2026-10-05T23:42:52.827463+00:00

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is fixed in 4.11.0.

 https://cve.radiocsirt.org/vuln/ghsa-m3mq-f375-5vgh GHSA-m3mq-f375-5vgh — Vantage6 Server JWT secret not cryptographically secure 2026-10-05T23:42:52.827497+00:00

Affected: PyPI: vantage6-server

### Impact The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is [predictable to some extent](https://docs.python.org/3/library/uuid.html#uuid.uuid1)

### Patches No

### Workarounds You may define JWT secret key in the server configuration file

 https://cve.radiocsirt.org/vuln/pysec-2025-221 PYSEC-2025-221 2026-10-05T23:42:52.827525+00:00

Affected: PyPI: vantage6-server

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is predictable to some extent. This vulnerability is fixed in 4.11.0.