Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/03/20 8:34 p.m.9 views

Effect `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC

Versions - effect: 3.19.15 - @effect/rpc: 0.72.1 - @effect/platform: 0.94.2 - Node.js: v22.20.0 - Vercel runtime with Fluid compute - Next.js: 16 App Router - @clerk/nextjs: 6.x Root cause Effect's MixedScheduler batches fiber continuations and drains them inside a single microtask or timer...

7.4CVSS6.1AI score0.0027EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2026/03/20 8:34 p.m.3 views

Race Condition

Overview org.webjars.npm:effect is a node package that allows you to add effects on images. Affected versions of this package are vulnerable to Race Condition in the MixedScheduler class, where the AsyncLocalStorage context is not properly isolated between concurrent fiber executions. An attacker...

9.1CVSS5.8AI score0.0027EPSS
SaveExploits1References2
Rows per page
Query Builder