Threats tagged 'brew-lexicon-cve-2026-112915'

A vulnerability in the filelock Python package's ReadWriteLock and AsyncReadWriteLock components allows a local user with write access to the lock database file path to cause every acquire operation to stall or hang indefinitely, ignoring timeout and blocking flags. This happens because the SQLite-backed lock runs a PRAGMA statement that loads the entire schema of the database file, and a crafted database file can cause the acquire to consume excessive CPU and memory or never return. The impact is denial of service (availability) only, with no confidentiality or integrity compromise. Versions 3.20.4 through 4.2.0 are affected.