CWE-833: Deadlock
Base
The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.
Consequences
- Availability: DoS: Resource Consumption (CPU), DoS: Resource Consumption (Other), DoS: Crash, Exit, or Restart
Recent advisories
- GHSA-mf4x-w4gh-4656 — Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability
- GHSA-mg66-mrh9-m8jx — Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components
- GHSA-3hg2-r75x-g69m — Vyper has incorrect re-entrancy lock when key is empty string
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor