CWE-1322: Use of Blocking Code in Single-threaded, Non-blocking Context
The product uses a non-blocking model that relies on a single threaded process for features such as scalability, but it contains code that can block when it is invoked.
3 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-19484 — @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
- CVE-2026-42256 — net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
- CVE-2026-71439 — Mermaid radar diagrams are vulnerable to DoS
Recently published
- CVE-2026-19484 — @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
- CVE-2026-71439 — Mermaid radar diagrams are vulnerable to DoS
- CVE-2026-42256 — net-imap: Denial of service via high iteration count for `SCRAM-*` authentication