MEDIUM5.3PyPI
GHSA-qmgc-5h2g-mvrw· CVE-2026-22701, PYSEC-2026-1374filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Modified: 9/10/2026
package
PyPI/filelock
pkg:pypi/filelock
MEDIUM6.3PyPI
GHSA-w853-jp5j-5j7f· CVE-2025-68146, PYSEC-2026-1375filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Modified: 9/10/2026
MEDIUM5.3PyPI
PYSEC-2026-1374· CVE-2026-22701, GHSA-qmgc-5h2g-mvrwfilelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Modified: 7/7/2026
MEDIUM6.3PyPI
PYSEC-2026-1375· CVE-2025-68146, GHSA-w853-jp5j-5j7ffilelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Modified: 7/7/2026