Description
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | wordops | < 3.21.0 | 3.21.0 | GHSA-23qq-p4gq-gc2g |
| PyPI | wordops | < 3.21.3 | 3.21.3 | PYSEC-2024-175 |