Race Condition Affecting rafcon package, versions [,0.15.4)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-RAFCON-6591332
- published 8 Apr 2024
- disclosed 1 Apr 2024
- credit Unknown
How to fix?
Upgrade rafcon to version 0.15.4 or higher.
Overview
rafcon is a Develop your robotic tasks with hierarchical state machines using an intuitive graphical user interface
Affected versions of this package are vulnerable to Race Condition due to the 'result' and 'exception_info' global variables not being thread-safe.
References
CVSS Scores
version 3.1