Race Condition Affecting ray package, versions [,2.11.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-RAY-6747477
- published 1 May 2024
- disclosed 1 May 2024
- credit Andrew Xue
How to fix?
Upgrade ray to version 2.11.0 or higher.
Overview
ray is an A system for parallel and distributed Python that unifies the ML ecosystem.
Affected versions of this package are vulnerable to Race Condition during the creation of actors in multi-threaded environments.
References
CVSS Scores
version 3.1