Search results

MessageStore::ClosedError can escape ensure_expire_fiber via an off-lock @closed check (latent under multi-threaded scheduler)

multi-threadingConcurrency/data race under preview_mtConcurrency/data race under preview_mt

Status: Open.

#2086 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

MessageStore #size is read off-lock in fiber-restart decisions (latent under multi-threaded scheduler)

multi-threadingConcurrency/data race under preview_mtConcurrency/data race under preview_mt

Status: Open.

#2085 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

each_follower: Fiber.yield under @lock is a no-op, leaving a broken follower in @followers

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2084 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

proxy_protocol_trusted_sources fails open when all CIDR entries are invalid

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2083 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

PROXY protocol header can be misread on a TCP segment split (wrong source IP / dropped connection)

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2082 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

OAuth login fails against Azure/Entra ID when expires_in is returned as a JSON string

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2081 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

SIGHUP config reload crashes a running broker on invalid config

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2080 In cloudamqp/lavinmq;

· viktorerlingsson opened on Jun 17, 2026

PROXY auto-detect peek blocks pre-auth with no read timeout (slowloris / FD exhaustion)

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2079 In cloudamqp/lavinmq;

· kickster97 opened on Jun 17, 2026

SIGHUP sync-mode flip reorders publisher confirms on a standalone node (cumulative Ack regression)

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2078 In cloudamqp/lavinmq;

· kickster97 opened on Jun 17, 2026

Unauthenticated JWT RSA-verification CPU amplification via the oauth_token cookie

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2077 In cloudamqp/lavinmq;

· kickster97 opened on Jun 17, 2026

Federation exchange link can register as an observer after it was deleted, leaking a dead link

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2076 In cloudamqp/lavinmq;

· kickster97 opened on Jun 17, 2026

OAuthUser#refresh blocks the connection read_loop forever on an unbuffered channel after token expiry

2.9.xAffects 2.9.xAffects 2.9.x

Status: Open.

Bug

#2075 In cloudamqp/lavinmq;

· kickster97 opened on Jun 17, 2026