| शीर्षक | awesto django-shop 13d9a77aff7eede74a5f363c1d540e005d88dbcd CWE-362 Concurrent Execution using Shared Resource with Improper |
|---|
| विवरण | awesto/django-shop deducts product stock during checkout without locking the stock row or using an atomic conditional update. When a product has one unit remaining, two concurrent checkout requests can both pass the stock logic and create orders before the deduction is serialized. This allows overselling and leaves inventory or order state inconsistent with real availability. |
|---|
| स्रोत | ⚠️ https://github.com/awesto/django-shop/issues/888 |
|---|
| उपयोगकर्ता | GalaxynC (UID 98975) |
|---|
| सबमिशन | 13/06/2026 01:24 PM (1 महीना पहले) |
|---|
| संयम | 18/07/2026 10:48 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 380028 [awesto django-shop तक 1.2.4 Purchase Stock shop/models/inventory.py रेस कंडीशन] |
|---|
| अंक | 19 |
|---|