Race Condition Affecting terra-notebook-utils package, versions [,0.8.0)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Race Condition vulnerabilities in an interactive lesson.

Start learning

Snyk IDSNYK-PYTHON-TERRANOTEBOOKUTILS-8161343
published3 Oct 2024
disclosed1 Oct 2024
creditUnknown

Report a new vulnerability Found a mistake?

Introduced: 1 Oct 2024

CWE-362 (opens in a new tab)

How to fix?

Upgrade terra-notebook-utils to version 0.8.0 or higher.

Overview

terra-notebook-utils is an Utilities for the Terra notebook environment.

Affected versions of this package are vulnerable to Race Condition in task submission due to improper thread synchronization. The issue could lead to crashes or inconsistent task states when tasks are submitted from background threads.

References

GitHub Commit

CVSS Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
High
Attack Requirements (AT)
None
Privileges Required (PR)
None
User Interaction (UI)
None

Confidentiality (VC)
Low
Integrity (VI)
None
Availability (VA)
High

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None