lily vulnerabilities

2 known vulnerabilities in lily from FascinatedBox. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  lily: Out-of-bounds Write

  CVE-2026-2662Feb 18, 2026FascinatedBox

  A weakness has been identified in FascinatedBox lily up to 2.3. This vulnerability affects the function count_transforms of the file src/lily_emitter.c. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been

• 7.8 High severity

  lily: Use After Free

  CVE-2026-2660Feb 18, 2026FascinatedBox

  A vulnerability was identified in FascinatedBox lily up to 2.3. Affected by this issue is the function shorthash_for_name of the file src/lily_symtab.c. The manipulation leads to use after free. Local access is required to approach this attack. The exploit is