CWE-609
Double-Checked Locking
The product uses double-checked locking to access a resource without the overhead of explicit synchronization, but the locking is insufficient.
Impactr finds and proves whether CWE-609 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.