Product by Tox-dev
Filelock
15 known vulnerabilities in Filelock (Tox-dev), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-112940 | Tox-dev Filelock: Race Condition Enabling Link Following | 7.1 | |
| Medium | CVE-2026-112934 | Tox-dev Filelock: UNIX Hard Link | 6.1 | |
| Medium | CVE-2026-112936 | filelock: ReadWriteLock follows a symlink at the lock path into SQLite | 6.1 | |
| Medium | CVE-2026-112909 | Tox-dev Filelock: Use of Incorrectly-Resolved Name or Reference | 6.1 | |
| Medium | CVE-2026-112911 | Tox-dev Filelock: Unverified Ownership | 6.3 | |
| Medium | CVE-2026-112937 | Tox-dev Filelock: Time-of-check Time-of-use (TOCTOU) Race Condition | 6.1 | |
| Medium | CVE-2026-112915 | Tox-dev Filelock: Uncontrolled Resource Consumption | 5.5 | |
| Medium | CVE-2026-112914 | Tox-dev Filelock: Race Condition Enabling Link Following | 5.3 | |
| Medium | CVE-2026-112906 | Tox-dev Filelock: Use of Multiple Resources with Duplicate Identifier | 4.7 | |
| Medium | CVE-2026-112939 | Tox-dev Filelock: Insufficient Verification of Data Authenticity | 4.7 | |
| Medium | CVE-2026-112935 | Tox-dev Filelock: Time-of-check Time-of-use (TOCTOU) Race Condition | 4.7 | |
| Low | CVE-2026-112941 | Tox-dev Filelock: Time-of-check Time-of-use (TOCTOU) Race Condition | 3.3 | |
| Medium | CVE-2025-68146 | filelock has TOCTOU race condition that allows symlink attacks during lock file creation | 6.3 | |
| Low | CVE-2026-112912 | Tox-dev Filelock: Link Following | 2.5 | |
| Medium | CVE-2026-22701 | filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock | 5.3 |