What is GHSA-47w6-gwp4-w6vc?

GHSA-47w6-gwp4-w6vc is a security advisory published by GitHub Security Advisories with High severity. vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Which CVE IDs does GHSA-47w6-gwp4-w6vc cover?

GHSA-47w6-gwp4-w6vc covers the following CVE IDs: CVE-2026-73652. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-47w6-gwp4-w6vc?

GHSA-47w6-gwp4-w6vc affects 1 product, including: pip/vantage6:\u003c= 5.0.2.

GHSA-47w6-gwp4-w6vcHigh

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Vendor

GitHub Security Advisories

Published

July 24, 2026

Last Modified

August 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-73652 →

📋 Description

Impact

Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes.

Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review

Patches

Workarounds

🎯 Affected products1

pip/vantage6:<= 5.0.2

🔗 References (2)

https://github.com/vantage6/vantage6/security/advisories/GHSA-47w6-gwp4-w6vc
https://github.com/advisories/GHSA-47w6-gwp4-w6vc