vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.
"https://github.com/pypa/advisory-database/blob/main/vulns/vantage6/PYSEC-2023-54.yaml"