CVE-2026-112913
1 advisory.
PyPI/filelock CVE-2026-112913: low 3.3
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
Action: Upgrade filelock to 4.2.1 or later.
pip install filelock==4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.20.4 | 4.2.1 | - |
Fixed versions
| 4.2.1 |
Sources
- osv: GHSA-9vhv-jxww-xfm5
- https://github.com/tox-dev/filelock/security/advisories/GHSA-9vhv-jxww-xfm5
- https://github.com/tox-dev/filelock/pull/834
- https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d
- https://github.com/tox-dev/filelock
- https://github.com/tox-dev/filelock/releases/tag/4.2.1
CVE-2026-112913 · published · modified · JSON