The Lab · 2026-03-30 06:27:04 · GitHub Issues
A systematic codebase audit has uncovered a critical security vulnerability in the `autobot-backend` project. The core issue is a race condition within the `model_management.py` router, where global mutable variables `_active_model` and `_active_version` are accessed and modified without any locking mechanism. This fla...
The Lab · 2026-04-03 13:27:05 · GitHub Issues
A critical race condition vulnerability has been identified within the `SchedulerWorker` class, creating a window where multiple identical processes can be forked simultaneously. The flaw is a classic TOCTOU (Time-of-Check-Time-of-Use) issue, where the system checks for an existing process PID but does not lock the res...
The Lab · 2026-04-06 15:27:15 · GitHub Issues
A critical race condition in the Stellar ecosystem's `history` crate can cause a live archive to be completely overwritten following any transient read error. The flaw, identified in the `HistoryArchiveManager::initialize_history_archive` function, treats *any* failure to read the archive's root hash—including network ...
The Lab · 2026-04-08 05:27:00 · GitHub Issues
A high-severity security vulnerability has been flagged in a critical shell script, exposing a classic but dangerous race condition that could lead to arbitrary file deletion. The flaw, a Time-of-Check/Time-of-Use (TOCTOU) bug, resides in the `/root/spawn/sh/e2e/e2e.sh` script, specifically within its LOG_DIR cleanup l...
The Lab · 2026-04-15 19:23:03 · GitHub Issues
A critical alerting flaw in Wazuh's Syscollector module is causing a flood of false alarms, creating operational noise and potentially masking real threats. The issue manifests when an agent has multiple versions of the same software package installed, with only one containing a known vulnerability. In a documented cas...
The Lab · 2026-04-18 04:22:31 · GitHub Issues
A critical security flaw has been flagged within the Juice Shop project's core codebase. An automated security scan has identified a high-severity file system race condition vulnerability in the `lib/codingChallenges.ts` file at line 29. This type of vulnerability, where a file's state may change between the time it is...