Threats tagged 'brew-bbot-cve-2026-112915'

A vulnerability in the filelock library's ReadWriteLock and AsyncReadWriteLock components allows a local user with write access to the lock database file path to cause every acquire operation to stall or hang indefinitely, ignoring timeout and non-blocking flags. This is achieved by placing a crafted SQLite database file at the lock path, which triggers extensive schema loading that blocks the lock acquisition. The issue affects filelock versions 3.20.4 through 4.2.0 and results in a denial of service condition without impacting confidentiality or integrity.