CVE-2026-112941 | Low | 3.3 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <… |
CVE-2026-112940 | High | 7.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX… |
CVE-2026-112939 | Medium | 4.7 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a marker that an attack… |
CVE-2026-112937 | Medium | 6.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-hard-link directory… |
CVE-2026-112936 | Medium | 6.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock pa… |
CVE-2026-112935 | Medium | 4.7 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker… |
CVE-2026-112934 | Medium | 6.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local use… |
CVE-2026-112915 | Medium | 5.5 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema… |
CVE-2026-112914 | Medium | 5.3 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowin… |
CVE-2026-112912 | Low | 2.5 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.acc… |
CVE-2026-112911 | Medium | 6.3 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4… |
CVE-2026-112909 | Medium | 6.1 | 2026-10-20 | filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local… |
CVE-2026-112906 | Medium | 4.7 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacke… |
CVE-2026-22701 | Medium | 5.3 | 2026-01-10 | filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementati… |
CVE-2025-68146 | Medium | 6.3 | 2025-12-16 | filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attacker… |