EulerOS 2.0 SP11 : python-filelock (EulerOS-SA-2026-4276)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

EulerOS 2.0 SP11 : python-filelock (EulerOS-SA-2026-4366)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

EulerOS 2.0 SP13 : python-filelock (EulerOS-SA-2026-4184)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

EulerOS 2.0 SP13 : python-filelock (EulerOS-SA-2026-4093)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: filelock: Removes locks reliably when a race between fcntl/close operations is detected. When the fcntlsetlk operation races with the close operation, the created lock is removed using dolockfilewait. However, LSMs may allow t...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2020-5258 DESCRIPTION: In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053278 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntlsetlk races with clos...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001463)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001463 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posixlockinode Light Hsieh reported a KASAN UAF warning...

Unity Linux 20.1070e Security Update: python-filelock (UTSA-2026-099470)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099470 advisory. filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition allows local attackers to...

Security Bulletin: Vulnerability in filelock bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the filelock library, which is affected by multiple vulnerabilities, including improper link resolution and symbolic link following vulnerabilities. CVE-2026-22701, CVE-2025-68146. Vulnerability Details...

OESA-2026-3143 python-filelock security update

Security Fixes: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows loc...

ROOT-APP-PYPI-CVE-2025-68146 CVE-2025-68146 in rootio-filelock - Patched by Root

Root has patched CVE-2025-68146 in the rootio-filelock package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-22701 CVE-2026-22701 in rootio-filelock - Patched by Root

Root has patched CVE-2026-22701 in the rootio-filelock package for Root:PyPI. Multiple fixed versions available...

collabi (0.0.5), intelecy-chocolate (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-22701 via filelock (2.0.13)

filelock PYPI version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - collabi 0.0.5 - intelecy-chocolate =0.1.0, =0.1.20, =0.1.23 Source cves: CVE-2026-22701 Source advisory: OSV:PYSEC-2026-1374...

31 (2.3.0), abaco (0.1.0) +851 more potentially affected by CVE-2026-22701 via filelock (>=3.0.4, <=3.20.2)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2026-22701 Source advisory: OSV:PYSEC-2026-1374...

filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

ImpactA Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with OTRUNC. An attacke...

31 (2.3.0), abaco (0.1.0) +849 more potentially affected by CVE-2025-68146 via filelock (>=3.0.4, <=3.20.0)

filelock PYPI version =3.0.4, =1.0.5, =0.1.0, =0.1.3, =1.3.0, =0.1.0, =0.2.0, =0.6.5, =0.0.2, =1.0.9, =0.87.2.dev9, =0.87.3.dev4 and more Source cves: CVE-2025-68146 Source advisory: OSV:PYSEC-2026-1375...

collabi (0.0.5), intelecy-chocolate (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2025-68146 via filelock (2.0.13)

filelock PYPI version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - collabi 0.0.5 - intelecy-chocolate =0.1.0, =0.1.20, =0.1.23 Source cves: CVE-2025-68146 Source advisory: OSV:PYSEC-2026-1375...

PYSEC-2026-1375 filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

Impact A Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with OTRUNC. An attack...

Security Bulletin: Vulnerability in filelock affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in filelock has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...