Lucene search
+L

21 matches found

osv_ghsa
osv_ghsa
•added 2026/10/28 9:08 p.m.•4 views

GHSA-J8F7-RJXC-MR56 filelock: ReadWriteLock follows a symlink at the lock path into SQLite

Summary ReadWriteLock and AsyncReadWriteLock resolve the lock path with pathlib.Path.resolve and pass it to sqlite3.connect without refusing a symlink. A local user who can create names in the lock's directory, such as /tmp or a shared cache, can plant a symlink at the lock path and make the...

6.1CVSS5.8AI score0.00232EPSS
SaveExploits1References5
Rows per page
Query Builder