CVE-2026-82543: Python Orm Shared Counter In Memory Read Modify Write

Non-atomic read-modify-write of a shared counter: $OBJ.$ATTR is incremented or decremented in Python memory and the whole (stale) object is written back with save(). Concurrent request handlers load the same row snapshot, each applies the same arithmetic to its own copy, and every writer persists the same result (lost update, CWE-362), so a pickup/download l

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-82543-python-orm-shared-counter-in-memory-read-modify-write --engine opengrep

Description

Non-atomic read-modify-write of a shared counter: $OBJ.$ATTR is incremented or decremented in Python memory and the whole (stale) object is written back with save(). Concurrent request handlers load the same row snapshot, each applies the same arithmetic to its own copy, and every writer persists the same result (lost update, CWE-362), so a pickup/download l