dwave-cloud-client@0.7.0 vulnerabilities

A minimal client for interacting with D-Wave cloud resources.

Direct Vulnerabilities

Known vulnerabilities in the dwave-cloud-client package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Race Condition

dwave-cloud-client is an A minimal client for interacting with D-Wave cloud resources.

Affected versions of this package are vulnerable to Race Condition when binary answer downloads were initiated multiple times in parallel. Previously, the write operation to the answer_data file was not thread-safe or atomic, resulting in data corruption during parallel downloads of the same answer.

How to fix Race Condition?

Upgrade dwave-cloud-client to version 0.12.0.dev0 or higher.

[,0.12.0.dev0)