Skip to content
OpenAdvisories

Product · tox-dev

filelock

20 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-112936 Public exploit

    filelock: ReadWriteLock follows a symlink at the lock path into SQLite

    filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who ca…