https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T21:47:46.780144+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112909 CVE-2026-112909 — filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path 2026-10-25T21:47:46.781119+00:00

Affected: tox-dev filelock

filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rename permission, or hard-linked there under a permissive hard-link policy; when an explicit mode is requested, affected versions from 3.10.2 can also change that file's mode. This issue is fixed in version 4.2.1.