Threats tagged 'brew-poetry-cve-2026-112935'

A vulnerability in filelock versions 3.22.0 through 4.2.0 allows a local user with write access to a sticky shared directory (e.g., /tmp) to cause two processes of the lock owner to simultaneously hold the same soft file lock. This occurs due to inode reuse and a race condition in stale-lock breaking logic, which can lead to integrity issues where two holders write protected data without detection.