CVE-2026-2660

FascinatedBox lily up to 2.3 is affected by a use-after-free in shorthash_for_name (src/lily_symtab.c). The issue requires local access and has publicly available exploit code. The affected project was informed of the problem early via an issue but has not responded yet. Other connected sources c...