Common Weakness Enumeration

CWE-667 Improper Locking

Description

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-667 ordered by modification date.

14 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-42cj-99w8-cp2p	CVE-2026-45404	MODERATE	golang/go.opentelemetry.io/otel/bridge/opentracing	OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access	2026-08-20
GHSA-6wx8-w4f5-wwcr	CVE-2026-54906	LOW	gem/concurrent-ruby	Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption	2026-06-19
GHSA-6hcq-hmm3-jj3c	CVE-2026-22735	LOW	maven/org.springframework/spring-webflux maven/org.springframework/spring-webmvc	Spring MVC and WebFlux has Server Sent Event stream corruption	2026-03-20
GHSA-jw2v-cq5x-q68g	CVE-2025-69198	MODERATE	-	Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted	2026-02-02
GHSA-m2v9-w374-5hj9	CVE-2024-32648	MODERATE	pypi/vyper	vyper default functions don't respect nonreentrancy keys	2025-01-14
GHSA-3hg2-r75x-g69m	CVE-2023-42441	MODERATE	pypi/vyper	Vyper has incorrect re-entrancy lock when key is empty string	2024-11-22
GHSA-h67m-xg8f-fxcf	CVE-2021-41213	MODERATE	pypi/tensorflow pypi/tensorflow-cpu pypi/tensorflow-gpu	Deadlock in mutually recursive `tf.function` objects	2024-11-07
GHSA-2qp4-g3q3-f92w	CVE-2022-24329	MODERATE	maven/org.jetbrains.kotlin/kotlin-stdlib	Improper Locking in JetBrains Kotlin	2024-10-29
GHSA-vr8j-hgmm-jh9r	CVE-2022-3996	HIGH	-	Denial of service by double-checked locking in openssl-src	2024-10-02
GHSA-q4hg-rmq2-52q9	CVE-2019-10072	HIGH	maven/org.apache.tomcat.embed/tomcat-embed-core	Improper Locking in Apache Tomcat	2024-03-11
GHSA-3hj2-hh36-hv9v	CVE-2020-36220	MODERATE	-	Data race in va-ts	2023-06-13
GHSA-7qw8-847f-pggm	CVE-2021-20291	MODERATE	golang/github.com/containers/storage	Improper Locking in github.com/containers/storage	2023-02-14
GHSA-7m37-cx35-qgmr	CVE-2022-48216	HIGH	npm/@uniswap/universal-router	Uniswap Universal Router Incorrect Authorization vulnerability	2023-01-11
GHSA-g2qx-6ghw-67hm	CVE-2020-13246	HIGH	golang/github.com/go-gitea/gitea	Denial of Service in Gitea	2021-05-20