aim ScheduledStatusReporter Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in aimhubio/aim version 3.23.0. The issue arises when the ScheduledStatusReporter object is instantiated to run on the main thread of the tracking server. This can lead to the main thread being blocked indefinitely, causing the tracking server to become unresponsive to other requests.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the tracking server to block responses to other requests indefinitely.