Threats tagged 'brew-lexicon-cve-2026-112907'

On Windows, certain soft lock implementations in filelock (versions 3.22.0 through 4.2.0) can be blocked indefinitely due to Windows opportunistic locks (oplocks) on the lock marker file. Another local user with read access can take a Level 1 oplock on a stale marker file and never release it, causing SoftFileLock.acquire() calls to hang past their timeout. This results in partial availability impact without compromising confidentiality or integrity. The issue is fixed in filelock version 3.25.2_5.