concurrency
Safeguard articles tagged "concurrency" — guides, analysis, and best practices for software supply chain and application security.
8 articles
p-limit: Safe Concurrency Control in Node.js
The p-limit npm package caps how many promises run at once — a one-function library that quietly prevents self-inflicted outages, API bans, and resource exhaustion in Node.js services.
Race Condition Vulnerabilities Explained
A race condition is a timing flaw where two operations that should happen in order overlap instead — enabling double-spends, TOCTOU bypasses, and kernel exploits.
Go Concurrency Security Pitfalls: When Data Races Become Vulnerabilities
A data race isn't just a flaky test — in the wrong place it's an auth bypass, a cross-request leak, or a denial of service. Here are the Go concurrency bugs that turn into security incidents.
Go: Check If a Key Exists in a Map (Comma-Ok Idiom)
How to check if a key exists in a Go map using the comma-ok idiom, why a plain lookup can't tell 'missing' from 'zero value', and the patterns for sets, nil maps, and concurrent access.
Worker Threads in Node.js: How They Work and How to Use Them Safely
A worker thread in Node.js runs JavaScript in parallel on a separate thread, letting you offload CPU-heavy work without blocking the event loop. Here is how they work and the security pitfalls to avoid.
A Practical Race Condition Example (and How to Fix It)
A race condition example is easiest to understand through a bank-balance check-then-act bug. Here is the anatomy, the exploit, and three ways to close it.
Race Condition Detection: Griffin AI vs Mythos
Race conditions are the hardest class of vulnerabilities for static analysis. Specific architectural capabilities separate tools that find them from tools that claim to.
Race Condition Vulnerabilities in Web Applications
Race conditions in web applications lead to double-spending, privilege escalation, and data corruption. This guide covers the most common patterns, detection techniques, and practical defenses.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.