tox-dev filelock
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-112941 | >= 4.1.0, < 4.2.1 | filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user r… | LOW 3.3 | 0.1 % | ||
| CVE-2026-112940 | >= 3.20.4, < 4.2.1 | filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process over… | HIGH 7.1 | 0.2 % | ||
| CVE-2026-112939 | >= 3.22.0, < 4.2.1 | filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-112937 | >= 4.1.0, < 4.2.1 | filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-112936 | >= 3.20.4, < 4.0.9 | filelock: ReadWriteLock follows a symlink at the lock path into SQLite | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-112935 | >= 3.22.0, < 4.2.1 | filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-112934 | >= 4.0.0, < 4.2.1 | filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its … | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-112915 | >= 3.20.4, < 4.2.1 | filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-112914 | >= 4.1.0, < 4.2.1 | filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the… | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-112912 | >= 3.32.6, < 4.2.1 | filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker | LOW 2.5 | 0.2 % | ||
| CVE-2026-112911 | >= 3.30.0, < 4.2.1 | filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion | MEDIUM 6.3 | 0.1 % | ||
| CVE-2026-112909 | < 4.2.1 | filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-112906 | >= 4.1.0, < 4.2.1 | filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse | MEDIUM 4.7 | 0.2 % | ||
| CVE-2026-22701 | < 3.20.3 | filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock | MEDIUM 5.3 | 0.1 % | ||
| CVE-2025-68146 | < 3.20.1 | filelock has TOCTOU race condition that allows symlink attacks during lock file creation | MEDIUM 6.5 | 0.2 % |