Vulnerabilities

TI-2026-85691 CVE-2026-112908

Incorrect permissions in filelock let local users end lock holds

LOW 23

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00121 Published 2026-11-05 Partial fix · 4.2.1 CWE-732

TI-2026-85684 CVE-2026-112938

Symlink race in filelock StrictSoftFileLock writes claims elsewhere

LOW 25

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00107 Published 2026-11-05 Fixed in 4.2.1 CWE-363

TI-2026-85681 CVE-2026-112907

Oplock on lock marker makes filelock wait past timeout on Windows

LOW 12

filelock is a platform-independent file lock for Python.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00104 Published 2026-11-05 Partial fix · 4.2.1 CWE-667

TI-2026-85683 CVE-2026-112913

filelock on Windows follows SQLite side files planted by other users

MEDIUM 49

filelock is a platform-independent file lock for Python.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00118 Published 2026-11-05 Partial fix · 4.2.1 CWE-367

TI-2026-85682 CVE-2026-112910

Incorrect permissions on Windows lock files in Python filelock

LOW 23

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00161 Published 2026-11-05 Partial fix · 4.2.1 CWE-732

TI-2026-76863 CVE-2026-112941 · GHSA-wfhq-q4j2-c37m

Race condition in filelock redirects lock writes to other directories

MEDIUM 49

filelock is a platform-independent file lock for Python.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-20 Partial fix · 4.2.1 CWE-367

TI-2026-76862 CVE-2026-112940 · GHSA-v4x8-3wr5-3wq8

Symlink race in filelock ReadWriteLock lets attackers overwrite files

MEDIUM 64

filelock is a platform-independent file lock for Python.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0019 Published 2026-10-20 Partial fix · 4.2.1 CWE-363

TI-2026-76861 CVE-2026-112939 · GHSA-rfpc-qcw5-3pc4

SoftFileLock in filelock trusts forged PIDs and removes live markers

MEDIUM 55

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0014 Published 2026-10-20 Partial fix · 4.2.1 CWE-345

TI-2026-76860 CVE-2026-112937 · GHSA-jqc4-5cvw-7w85

Race condition in filelock ReadWriteLock enables directory deletion

LOW 26

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00162 Published 2026-10-20 Fixed in 4.2.1 CWE-367

TI-2026-76859 CVE-2026-112936 · GHSA-j8f7-rjxc-mr56

Symlink following in filelock ReadWriteLock redirects SQLite database

MEDIUM 60

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00232 Published 2026-10-20 Partial fix · 4.0.9 CWE-59

TI-2026-76858 CVE-2026-112935 · GHSA-fq56-3cx3-fjxp

Race condition in filelock SoftFileLock admits two lock holders

MEDIUM 55

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00132 Published 2026-10-20 Partial fix · 4.2.1 CWE-367

TI-2026-76857 CVE-2026-112934 · GHSA-fj95-fr6c-h845

Unsafe holder record refresh in filelock SoftReadWriteLock

MEDIUM 60

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00233 Published 2026-10-20 Partial fix · 4.2.1 CWE-62

TI-2026-76856 CVE-2026-112915 · GHSA-cwqr-hh33-gh44

Crafted lock database makes filelock ReadWriteLock acquisitions hang

MEDIUM 58

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2026-10-20 Partial fix · 4.2.1 CWE-400

TI-2026-76855 CVE-2026-112914 · GHSA-crv4-6mhj-j5jh

Link following in filelock SoftFileLock lets local users link files

LOW 23

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00161 Published 2026-10-20 Partial fix · 4.2.1 CWE-363

TI-2026-76854 CVE-2026-112912 · GHSA-9j6q-wvj5-jgjg

Symlink following in filelock SoftFileLock leaks path existence

MEDIUM 46

filelock is a platform-independent file lock for Python.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00213 Published 2026-10-20 Partial fix · 4.2.1 CWE-59

TI-2026-76853 CVE-2026-112911 · GHSA-9c4x-gm8v-wgc4

filelock soft locks adopt directories created by other local users

MEDIUM 61

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00148 Published 2026-10-20 Partial fix · 4.2.1 CWE-283

TI-2026-76852 CVE-2026-112909 · GHSA-69hj-f68j-2879

filelock UnixFileLock truncates files placed on the lock path

MEDIUM 60

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.0022 Published 2026-10-20 Partial fix · 4.2.1 CWE-706

TI-2026-76851 CVE-2026-112906 · GHSA-2g95-wg33-c5x2

Race condition in filelock SoftFileLock evicts live lock markers

MEDIUM 55

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00168 Published 2026-10-20 Partial fix · 4.2.1 CWE-694

TI-2026-18228 CVE-2026-22701 · GHSA-qmgc-5h2g-mvrw

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

LOW 23

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00127 Published 2026-01-10 Partial fix · 3.20.3 CWE-362

TI-2025-41727 CVE-2025-68146 · GHSA-w853-jp5j-5j7f

filelock has TOCTOU race condition that allows symlink attacks during lock file creation

LOW 28

filelock is a platform-independent file lock for Python.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00198 Published 2025-12-16 Partial fix · 3.20.1 CWE-362

Vulnerabilities

Filters