CWE-1096
Singleton Class Instance Creation without Proper Locking or Synchronization
The product implements a Singleton design pattern but does not use appropriate locking or other synchronization mechanism to ensure that the singleton class is only instantiated once.
Impactr finds and proves whether CWE-1096 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.