taskgraph@0.7.0 vulnerabilities

Parallel task graph framework

  • latest version

    0.11.1

  • latest non vulnerable version

  • first published

    7 years ago

  • latest version published

    1 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the taskgraph package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Race Condition

    taskgraph is a Parallel task graph framework

    Affected versions of this package are vulnerable to Race Condition when multiple threads tried to read or write to the completed Task Database at the same time. There is a potential for this to escalate into something like a Denial of Service (DoS) attack, although executing such an attack might not be straightforward.

    How to fix Race Condition?

    Upgrade taskgraph to version 0.8.1 or higher.

    [,0.8.1)
    • M
    Race Condition

    taskgraph is a Parallel task graph framework

    Affected versions of this package are vulnerable to Race Condition during its normal termination procedure. This poses a risk of freezing an object or causing a crash.

    How to fix Race Condition?

    Upgrade taskgraph to version 0.10.0 or higher.

    [,0.10.0)