← WebKit Silent-Fix Report — 2026-W21

e7c63753e1  [JSC] Remove unneeded m_tasks append in DeferredWorkTimer::cancelPendingWorkSafe

severity medium class Other confidence 0.50 JSC runtime
Yijia Huang Thu May 21 09:14:26 2026 -0700 full: e7c63753e10a2fef6787c25f04e4238fb307075b bug report ↗ view on GitHub ↗
Primitive: duplicate raw DeferredWorkTimer tickets during realm teardown
Triage note: Lifetime/bookkeeping bug during realm teardown.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…