Threats tagged 'brew-gam-cve-2026-112913'

On Windows, the filelock library's ReadWriteLock and AsyncReadWriteLock use SQLite side files for locking. A local user who can create files in the lock directory but cannot delete others' files can place a specially crafted SQLite side file (such as a -wal or -journal file) beside the database. This causes the lock user’s attempts to acquire read or write locks to fail with disk I/O errors or unexpected file deletions until the side file is removed. This affects filelock versions 3.20.4 through 4.2.0 on Windows in directories where untrusted users can create but not delete files, such as C:\Windows\Temp and C:\Users\Public. The vulnerability has a low CVSS score (3.3) due to its local attack vector and limited impact on availability only.