CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location

Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)

CVE-2025-68146 filelock has TOCTOU race condition that allows symlink attacks during lock file creation

Local privilege escalation via improper symlink following