MetaCredo.Check.Security.TOCTOU (MetaCredo v0.1.0)

View Source

Detects Time-of-Check-Time-of-Use (TOCTOU) race condition vulnerabilities (CWE-367).

Identifies patterns where a check function (exists?, stat, access) is followed by a use function (read, write, open) on the same resource, creating a race condition window between check and use.

Category: Security / Priority: high