GHSA-4946-85pr-fvxh
GitHub Security Advisory
vantage6's CORS settings overly permissive
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
### Impact
The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server.
The impact is limited because v6 does not use session cookies
### Patches
No
### Workarounds
No
Affected Packages
PyPI
vantage6
Affected versions:
0
(fixed in 4.3.0)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 13, 2025 6:28 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.