Skip to content
OpenAdvisories

Package · Debian

python-filelock

17 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.3

    filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

    filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree and resolve its names again during later record operations, allowing another loca…

  • Low 2.5

    filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

    filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.access writability check for a node without its owner-write bit, allowing another local user on a platf…