Lucene search
+L

25 matches found

Veracode
Veracode
•added 2026/10/29 4:55 a.m.•8 views

Filelock: ReadWriteLock Follows A Symlink At The Lock Path Into SQLite

Summary "ReadWriteLock" and "AsyncReadWriteLock" resolve the lock path with "pathlib.Path.resolve" and pass it to "sqlite3.connect" without refusing a symlink. A local user who can create names in the lock's directory, such as "/tmp" or a shared cache, can plant a symlink at the lock path and mak...

6.1CVSS5.8AI score0.00232EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder