Weakness (CWE)
CWE-1088: Synchronous Access of Remote Resource without Timeout
Base Incomplete
The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.
Source: MITRE CWE-1088
1 result · Clear filters · Feed
-
Medium 5.9
Denial of Service in aimhubio/aim
A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The …