29 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-112913
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite t...
UBUNTU-CVE-2026-112913
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite to the lock database by pathname, allowing another local account that can create adjacent names to place a database-wal or database-journa...
CVE-2026-112913
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite to the lock database by pathname, allowing another local account that can create adjacent names to place a database-wal or database-journa...
CVE-2026-112913
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite to the lock database by pathname, allowing another local account that can create adjacent names to place a database-wal or database-journa...
Filelock: ReadWriteLock Follows A Symlink At The Lock Path Into SQLite
Summary "ReadWriteLock" and "AsyncReadWriteLock" resolve the lock path with "pathlib.Path.resolve" and pass it to "sqlite3.connect" without refusing a symlink. A local user who can create names in the lock's directory, such as "/tmp" or a shared cache, can plant a symlink at the lock path and mak...
Filelock ReadWriteLock: A Crafted Lock Database Makes Every Acquire Stall Or Hang Regardless Of Timeout
"ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock run "PRAGMA journalmode=MEMORY" on a fresh connection for every acquire. That statement makes SQLite load the whole schema the "sqlitemaster" table, which lists every table and index with its "CREATE" text of whatever...
filelock: ReadWriteLock follows a symlink at the lock path into SQLite
Summary ReadWriteLock and AsyncReadWriteLock resolve the lock path with pathlib.Path.resolve and pass it to sqlite3.connect without refusing a symlink. A local user who can create names in the lock's directory, such as /tmp or a shared cache, can plant a symlink at the lock path and make the...
EUVD-2026-105026
filelock: ReadWriteLock follows a symlink at the lock path into SQLite...
GHSA-J8F7-RJXC-MR56 filelock: ReadWriteLock follows a symlink at the lock path into SQLite
Summary ReadWriteLock and AsyncReadWriteLock resolve the lock path with pathlib.Path.resolve and pass it to sqlite3.connect without refusing a symlink. A local user who can create names in the lock's directory, such as /tmp or a shared cache, can plant a symlink at the lock path and make the...
Filelock: ReadWriteLock On The Hard-link Route Deletes Any Directory Another User Renames Onto Its .filelock-* Link Dire
"ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock remove their private ".filelock-" link directories with "shutil.rmtree" a recursive delete on a remembered path. They do not check that the path still names the directory they created. This happens on the hard-link rout...
Filelock: ReadWriteLock On Windows Acts On SQLite Side Files Another Local User Places Beside Its Database
On Windows, "ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: "-journal", the rollback journal pages saved to undo an interrupted write; "-wal", the...
filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock remove their private .filelock- link directories with shutil.rmtree a recursive delete on a remembered path. They do not check that the path still names the directory they created. This happens on the hard-link route a hard...
GHSA-JQC4-5CVW-7W85 filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock remove their private .filelock- link directories with shutil.rmtree a recursive delete on a remembered path. They do not check that the path still names the directory they created. This happens on the hard-link route a hard...
GHSA-9VHV-JXWW-XFM5 filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
On Windows, ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal pages saved to undo an interrupted write; -wal, the write-ahead...
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
On Windows, ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal pages saved to undo an interrupted write; -wal, the write-ahead...
PT-2026-122459
Name of the Vulnerable Software and Affected Versions filelock versions 3.20.4 through 4.2.0 Description On Windows, the ReadWriteLock and AsyncReadWriteLock classes are susceptible to a local denial of service. This occurs when the lock database is located in a directory where other local accoun...
PT-2026-122428
On Windows, ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal pages saved to undo an interrupted write; -wal, the write-ahead...
SUSE CVE-2026-112936
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory t...
Linux Distros Unpatched Vulnerability : CVE-2026-112936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock pat...
CVE-2026-112936
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory t...