CVE-2026-22701
2 advisories.
PyPI/filelock CVE-2026-22701: medium 5.3, EPSS 0.13%
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Action: Upgrade filelock to 3.20.3 or later.
pip install filelock==3.20.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.20.3 | - |
Fixed versions
| 3.20.3 |
Sources
- osv: GHSA-qmgc-5h2g-mvrw
- https://github.com/tox-dev/filelock/security/advisories/GHSA-qmgc-5h2g-mvrw
- https://nvd.nist.gov/vuln/detail/CVE-2026-22701
- https://github.com/tox-dev/filelock/commit/255ed068bc85d1ef406e50a135e1459170dd1bf0
- https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5
- https://github.com/tox-dev/filelock
CVE-2026-22701 · published · modified · JSON
PyPI/filelock CVE-2026-22701: medium 5.3, EPSS 0.13%
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Action: Upgrade filelock to 3.20.3 or later.
pip install filelock==3.20.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.20.3 | - |
Fixed versions
| 3.20.3 |
Sources
- osv: PYSEC-2026-1374
- https://github.com/tox-dev/filelock/security/advisories/GHSA-qmgc-5h2g-mvrw
- https://nvd.nist.gov/vuln/detail/CVE-2026-22701
- https://github.com/tox-dev/filelock/commit/255ed068bc85d1ef406e50a135e1459170dd1bf0
- https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5
- https://github.com/tox-dev/filelock
- https://pypi.org/project/filelock
- https://github.com/advisories/GHSA-qmgc-5h2g-mvrw
CVE-2026-22701 · published · modified · JSON