#560 [API/Race] tenant_apps.py TOCTOU in update_configuration

closed medium Created 2025-12-17 16:30 · Updated 2025-12-17 19:58

Description

Edit
File: api/blueprints/v1/tenant_apps.py:746-789. SELECT current config, merge, then UPDATE. Concurrent updates could overwrite each other (lost update problem). FIX: Use SELECT FOR UPDATE or optimistic locking with version column.

Comments

Loading comments...

Context

Loading context...

Audit History

View All
Loading audit history...