virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...

GHSA-QMGC-5H2G-MVRW filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

Vulnerability Summary Title: Time-of-Check-Time-of-Use TOCTOU Symlink Vulnerability in SoftFileLock Affected Component: filelock package - SoftFileLock class File: src/filelock/soft.py lines 17-27 CWE: CWE-362, CWE-367, CWE-59 --- Description A TOCTOU race condition vulnerability exists in the...

CVE-2025-68770

creationtimestamp| type| source ---|---|--- 2026-01-13 18:13:04+00:00| seen| https://gist.github.com/Darkcrai86/23a1c9b1386bf2ee4eada07836c6305e 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...

CVE-2025-68800

creationtimestamp| type| source ---|---|--- 2026-01-13 18:07:18+00:00| seen| https://gist.github.com/Darkcrai86/420c20b543966f4e2cb694f8c3aaa567 2026-03-01 14:54:31+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfyyms52ac2s 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-68819

creationtimestamp| type| source ---|---|--- 2026-01-13 18:03:23+00:00| seen| https://gist.github.com/Darkcrai86/d1f51f2011ba136b7aa21beec3c8afe3 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-59922

creationtimestamp| type| source ---|---|--- 2026-01-13 18:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcd5aqry2h2r 2026-01-14 09:43:15+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mcerryezqs26 2026-01-14 10:35:43+00:00| seen|...

CVE-2025-71066

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:53+00:00| seen| https://gist.github.com/Darkcrai86/e003182cbb6b498a889ddc121c3ed0f2 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-0386

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:15:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115889150690428793 2026-01-13 18:16:30+00:00| seen|...

CVE-2026-20859

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-20831

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-21265

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:04:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889109162271840 2026-01-13 18:16:30+00:00| seen|...

CVE-2026-20953

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:17:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889158303083604 2026-01-13 18:18:45+00:00| seen|...

CVE-2026-20955

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:18:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010 2026-01-13 18:40:37+00:00| seen|...

CVE-2026-20868

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-01-13 18:56:05+00:00| seen|...

CVE-2026-20869

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-20929

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-01-13 19:10:11+00:00| seen|...

CVE-2026-20963

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:18:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd63kf7ul2a 2026-01-13 18:18:45+00:00| seen|...

CVE-2026-20965

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:17:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0009 2026-01-13 18:18:10+00:00| seen|...

CVE-2026-20935

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

CVE-2026-20854

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-01-13 19:23:05+00:00| seen|...