cve.bz

CWE-1322: Use of Blocking Code in Single-threaded, Non-blocking Context

Filter

The product uses a non-blocking model that relies on a single threaded process for features such as scalability, but it contains code that can block when it is invoked.

What the weakness is: CWE-1322 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-25 Forced Deadlock Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-1322, as MITRE names them. Credits.

Ask an AI about CWE-1322

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1322: Use of Blocking Code in Single-threaded, Non-blocking Context and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1322.html and https://cve.bz/cve/cwe/1322?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2026-120399

    A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected list…

  2. 6.2CVE-2026-89329EPSS 0.2%

    A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the `multipathd` listen…

  3. 7.5CVE-2026-19484EPSS 0.6%

    @fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendore…

  4. 5.3CVE-2026-71439EPSS 0.5%

    Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CP…

  5. 6.0CVE-2026-42256EPSS 0.3%

    Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating a connection with SCRAM-SHA1 or SCRAM-S…