Skip to main content

Vendor archive

tox-dev CVEs

Beta · best-effort

2 CVEs tagged to vendor tox-dev0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

CVE-2026-22701

Published Jan 10, 2026

filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock p…

CVSS 5.3 · Medium
evidence mentions
4
Buzz score
26.1
Vendor/product tagsBeta · best-effort

CVE-2025-68146

Published Dec 16, 2025

filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attackers to corrupt or trun…

CVSS 6.3 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1