Tox-dev - vulnerabilities (CVEs)

15 CVEs in 1 products, 13 in the last 30 days, newest from 2026-10-20.

Products

• Filelock - 15 CVEs

Newest CVEs of Tox-dev

• CVE-2026-112941 - CVSS 3.3 (low), 2026-10-20: filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the…
• CVE-2026-112940 - CVSS 7.1 (high), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on…
• CVE-2026-112939 - CVSS 4.7 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a marker that an…
• CVE-2026-112937 - CVSS 6.1 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-hard-link directory…
• CVE-2026-112936 - CVSS 6.1 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock…
• CVE-2026-112935 - CVSS 4.7 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker…
• CVE-2026-112934 - CVSS 6.1 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local…
• CVE-2026-112915 - CVSS 5.5 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding…
• CVE-2026-112914 - CVSS 5.3 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside,…
• CVE-2026-112912 - CVSS 2.5 (low), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional…
• CVE-2026-112911 - CVSS 6.3 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from…
• CVE-2026-112909 - CVSS 6.1 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another…
• CVE-2026-112906 - CVSS 4.7 (medium), 2026-10-20: filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an…
• CVE-2026-22701 - CVSS 5.3 (medium), 2026-01-10: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock…
• CVE-2025-68146 - CVSS 6.5 (medium), 2025-12-16: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local…