PVE-2024-72482

Advisory

Certain versions of Nvflare are vulnerable to a race condition. The pipe handler has a th…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed * Add min_responses to send_model_and_wait() by SYangster in https://gith…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/NVIDIA/NVFlare/pull/2728/commits/4edaff43c5f93db6540c2f663691fcec7693acba
• https://github.com/NVIDIA/NVFlare/pull/2728
• https://pypi.org/project/nvflare
• https://data.safetycli.com/changelogs/nvflare/