aieng-template-uv (0.1.1), cellmerge (>=0.1.0, <=0.1.1) +4 more potentially affected by CVE-2026-112909 via filelock (3.28.0)

filelock PYPI version 3.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - aieng-template-uv 0.1.1 - cellmerge =0.1.0, =0.0.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-112909 Source advisory:...

ai2-tango (>=0.1.0, <=0.3.6), allennlp (2.8.0) +13 more potentially affected by CVE-2026-112909 via filelock (3.3.2)

filelock PYPI version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - ai2-tango =0.1.0, =0.3.1, =0.1.2, =0.8.0.dev6, =1.2.0, =1.0.0, =1.0.1, =2.1.0, =0.5.7, =0.6.1 - weblate 4.9.0 Source cves: CVE-2026-112909 Sourc...

fair-llm (0.6.4), gam7 (>=7.48.12, <=7.48.14) +1 more potentially affected by CVE-2026-112909 via filelock (3.32.6)

filelock PYPI version 3.32.6 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - fair-llm 0.6.4 - gam7 =7.48.12, =0.3.1, =0.9.0 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

can-show-you-anything-ai (>=0.1.3, <=0.1.18), seleniumbase (>=2.1.9, <=2.3.3) potentially affected by CVE-2026-112909 via filelock (3.4.0)

filelock PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - can-show-you-anything-ai =0.1.3, =2.1.9, =2.3.3 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

fate-flow (2.2.0), raiden (>=3.0.0rc7, <=3.0.1) +2 more potentially affected by CVE-2026-112909 via filelock (3.3.1)

filelock PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - fate-flow 2.2.0 - raiden =3.0.0rc7, =1.67.0, =1.0.0, =1.0.9 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

aider-code (>=0.1.1.post47, <=0.1.1.post74), aider-omni (0.86.2.dev20) +43 more potentially affected by CVE-2026-112909 via filelock (3.19.1)

filelock PYPI version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - aider-code =0.1.1.post47, =1.1.0, =19.0.7, =1.0.0, =0.0.1, =0.1.1.post75, =0.1.0, =0.2.0, =0.5.0, =0.6.0 - fractal-lif-converters 0.5.0 and mor...

EUVD-2026-105017

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path...

esphome (>=2026.9.0b1, <=2026.9.1), esphome-log-collector (>=0.1.0, <=0.3.1) +5 more potentially affected by CVE-2026-112909 via filelock (3.32.4)

filelock PYPI version 3.32.4 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - esphome =2026.9.0b1, =0.1.0, =7.48.6, =0.3.33, =3.4.4, =0.1.0, =0.5.1 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

apollo-sdk (>=0.2.0, <=0.2.11), autorad (>=0.2.5.dev0, <=0.2.5) +17 more potentially affected by CVE-2026-112909 via filelock (3.8.0)

filelock PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - apollo-sdk =0.2.0, =0.2.5.dev0, =0.12.0.dev48, =0.0.3, =0.2.11, =0.0.31, =1.8.0, =1.0.0, =1.8.0, =2.4.0rc2 - rooster-client 0.0.1 and more Sourc...

abilian-sbe (>=1.0.5, <=1.1.10), autocate (0.1.0) +20 more potentially affected by CVE-2026-112909 via filelock (3.13.4)

filelock PYPI version 3.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - abilian-sbe =1.0.5, =1.6.0, =0.1.1, =0.3.0, =0.2.12, =1.0.0, =0.1.0, =0.2.3, =0.1.0, =0.0.1, =3.13.0.dev9, =0.0.0, =0.1.0 and more Source cves:...

bfcl-eval (>=2025.11.10, <=2026.3.23), ironoc-pytest-conor-heffron (>=2.1.7, <=2.2.5) +37 more potentially affected by CVE-2026-112909 via filelock (3.20.0)

filelock PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - bfcl-eval =2025.11.10, =2.1.7, =2.2.5 - isaacsim-asset 6.0.0.0 - isaacsim-benchmark 6.0.0.0 - isaacsim-core 6.0.0.0 - isaacsim-cortex 6.0.0.0 -...

adversarial-workflow (>=0.4.0, <=0.9.8), aider-chat (0.86.2) +45 more potentially affected by CVE-2026-112909 via filelock (3.20.3)

filelock PYPI version 3.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - adversarial-workflow =0.4.0, =1.3.0, =0.1.0, =0.5.0, =0.2.2, =0.5.1, =1.1.0.dev20260322010408, =0.0.6, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more...

31 (2.3.0), ahead (>=0.1.0, <=0.6.0) +103 more potentially affected by CVE-2026-112909 via filelock (3.0.12)

filelock PYPI version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - 31 2.3.0 - ahead =0.1.0, =1.0.9, =0.0.1, =0.1.2, =1.0.0rc6.dev20200529, =0.0.3, =1.0.0rc6, =0.0.1rc1, =1.5.0, =26.5.1, =0.0.1, =0.0.3, =0.0.8 a...

kayalab (>=0.7.30, <=0.11.9), llm-docstring-generator (1.0.0) +3 more potentially affected by CVE-2026-112909 via filelock (3.13.3)

filelock PYPI version 3.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - kayalab =0.7.30, =1.0.0, =0.0.0, =1.0.2 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

bandersnatch (>=3.0.0, <=3.0.1) potentially affected by CVE-2026-112909 via filelock (3.0.9)

filelock PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - bandersnatch =3.0.0, =3.0.1 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

esphome (>=2026.8.0b1, <=2026.8.2), gam7 (>=7.47.7, <=7.48.1) +4 more potentially affected by CVE-2026-112909 via filelock (3.32.2)

filelock PYPI version 3.32.2 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - esphome =2026.8.0b1, =7.47.7, =1.5.9.2, =1.0.2, =2026.8.0, =2026.8.1 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

ai2-scholar-qa (>=0.6.5, <=0.8.14), aider-chat (>=0.67.0, <=0.72.3) +76 more potentially affected by CVE-2026-112909 via filelock (3.16.1)

filelock PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - ai2-scholar-qa =0.6.5, =0.67.0, =0.1.8, =0.1.0, =0.1.0, =1.0.1, =0.60.2, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =1.0.0,...

ironoc-pytest-conor-heffron (>=2.3.4, <=2.3.5), memory-os-ai (>=4.0.6, <=4.0.8) +3 more potentially affected by CVE-2026-112909 via filelock (3.25.0)

filelock PYPI version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - ironoc-pytest-conor-heffron =2.3.4, =4.0.6, =0.3.1, =0.23.1, =1.0.0, =1.2.2 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-28...

seleniumbase (2.4.14) potentially affected by CVE-2026-112909 via filelock (3.5.0)

filelock PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - seleniumbase 2.4.14 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

disformers (>=0.0.1, <=0.10.7), seleniumbase (1.66.4) potentially affected by CVE-2026-112909 via filelock (3.1.0)

filelock PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - disformers =0.0.1, =0.10.7 - seleniumbase 1.66.4 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...