Threats tagged 'brew-poetry-cve-2026-112938'

A vulnerability in filelock versions 3.30.0 through 4.2.0 allows a local user with write access to a shared directory to swap a symbolic link in place of a lock coordination directory during a narrow timing window. This causes the lock user's process to create claim files in a directory chosen by the attacker but writable only by the lock user. The effect can cause denial of service by making other locks time out until manually force-broken. The vulnerability requires local access and specific directory permissions, with medium severity impact.