A vulnerability classified as problematic has been found in FascinatedBox lily up to 2.3. Affected by this issue is the function
shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2026-2660. Local access is required to approach this attack. Moreover, an exploit is present.
The project was informed of the problem early through an issue report but has not responded yet.
