filelock: filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation (moderate). GHSA-w853-jp5j-5j7f, CVE-2025-68146, PYSEC-2026-1375.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?