| Package | Affected versions | Patched versions |
|---|---|---|
| aim | ≥ 3.15.0, ≤ 3.23.0 | |
| aim | = 3.23.0 |
In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free