Threats tagged 'brew-poetry-cve-2026-112915'

A vulnerability in filelock's ReadWriteLock and AsyncReadWriteLock components allows a local user who can place or overwrite the lock database file to cause every acquire operation to stall or hang indefinitely, ignoring timeout and blocking settings. This results in a denial of service affecting availability only, with no confidentiality or integrity impact. The issue affects filelock versions 3.20.4 through 4.2.0 and requires the attacker to have write access to the lock file path, typically in a non-sticky shared directory or a writable database owned by the lock user. The vulnerability is rated medium severity with a CVSS score of 5.5 and has been fixed in version 2.5.1_1 of the affected product poetry.