Race Condition Affecting automationhat package, versions [,0.2.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-AUTOMATIONHAT-6836806
- published 13 May 2024
- disclosed 1 May 2024
- credit Unknown
How to fix?
Upgrade automationhat to version 0.2.0 or higher.
Overview
automationhat is a Driver for the Pimoroni Automation HAT
Affected versions of this package are vulnerable to Race Condition due to asynchronous reads from the update_lights thread that interfered with main thread ADC reads, leading to random erroneous readings When auto_lights are enabled.
References
CVSS Scores
version 3.1