Picketbox uses non-synchronized static maps ------------------------------------------- Key: SECURITY-777 URL: https://issues.jboss.org/browse/SECURITY-777 Project: PicketBox Issue Type: Bug Security Level: Public(Everyone can see) Affects Versions: PicketBox_4_0_20.Beta2 Reporter: Stuart Douglas Assignee: Stefan Guilhen Fix For: PicketBox_4_0_20.Final Attachments: picketlink.diff Picketbox uses quite a few static maps as global registries (yuck), and unfortunately they are not all thread safe, which can result in races as Wildfly starts security domains asynchronously. Please see attached patch.