Skip to content
OpenAdvisories

Vendor

tox-dev

20 known vulnerabilities.

Products

filelock 20
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-112936 Public exploit

    filelock: ReadWriteLock follows a symlink at the lock path into SQLite

    filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who ca…

    tox-dev filelock python-filelock filelock Debian Ubuntu PyPI