MEDIUM5.3PyPI
GHSA-qmgc-5h2g-mvrw· CVE-2026-22701, PYSEC-2026-1374filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Modified: 9/10/2026
package
pkg:pypi/filelock
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Modified: 9/10/2026
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Modified: 9/10/2026
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Modified: 7/7/2026
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Modified: 7/7/2026