Race Condition Affecting ethyca-fides package, versions [,2.1.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-ETHYCAFIDES-6243629
- published 13 Feb 2024
- disclosed 1 Feb 2024
- credit Unknown
How to fix?
Upgrade ethyca-fides to version 2.1.0 or higher.
Overview
ethyca-fides is an Open-source ecosystem for data privacy as code.
Affected versions of this package are vulnerable to Race Condition during the initialization of the FidesConfig class. This vulnerability can lead to unexpected behavior or incorrect security configurations if two threads attempt to modify the security attribute simultaneously.
References
CVSS Scores
version 3.1