Race Condition Affecting ophyd-async package, versions [,0.5.1)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-OPHYDASYNC-8145546
- published 2 Oct 2024
- disclosed 1 Oct 2024
- credit Dominic Oram
How to fix?
Upgrade ophyd-async to version 0.5.1 or higher.
Overview
ophyd-async is an Asynchronous Bluesky hardware abstraction code, compatible with control systems like EPICS and Tango
Affected versions of this package are vulnerable to Race Condition when setting one signal and monitoring another. This issue could lead to missed signal changes or incorrect system behaviour in asynchronous environments.