Galaxync

**Name of the Vulnerable Software and Affected Versions** allegro versions prior to bcf65b994ef29fb3fc2e10b660e6288723d5209e **Description** A race condition exists in the Hostname Allocation Handler component within the `AssetLastHostname.increment hostname()` function located in the `src/ralph/assets/models/assets.py` file. This issue occurs when the `counter` argument is manipulated, potentially allowing an attacker to exploit the timing of concurrent operations. A race condition is a situation where the behavior of software depends on the relative timing of events, such as the order in which threads are scheduled. **Recommendations** Update allegro to version bcf65b994ef29fb3fc2e10b660e6288723d5209e or later. As a temporary mitigation, restrict access to the `AssetLastHostname.increment hostname()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** awesto django-shop versions prior to 1.2.5 **Description** A race condition exists in the Purchase Stock Handler component within the `shop/models/inventory.py` file. This issue allows for remote manipulation, although the attack is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.