[ Vendor · 13 CVEs ]
tox-dev
CVEs affecting tox-dev published in the last 30 days, plus any tox-dev CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112934 | 20 Oct 2026 | CVSS 6.1 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another… | Fix |
| CVE-2026-112935 | 20 Oct 2026 | CVSS 4.7 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its… | Fix |
| CVE-2026-112936 | 20 Oct 2026 | CVSS 6.1 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve… | Fix |
| CVE-2026-112937 | 20 Oct 2026 | CVSS 6.1 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-hard-link… | Fix |
| CVE-2026-112939 | 20 Oct 2026 | CVSS 4.7 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a marker that… | Fix |
| CVE-2026-112940 | 20 Oct 2026 | CVSS 7.1 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by… | Fix |
| CVE-2026-112941 | 20 Oct 2026 | CVSS 3.3 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful… | Fix |
| CVE-2026-112906 | 20 Oct 2026 | CVSS 4.7 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when… | |
| CVE-2026-112909 | 20 Oct 2026 | CVSS 6.1 | tox-dev filelockfilelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when… | |
| CVE-2026-112911 | 20 Oct 2026 | CVSS 6.3 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock… | Fix |
| CVE-2026-112912 | 20 Oct 2026 | CVSS 2.5 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the… | Fix |
| CVE-2026-112914 | 20 Oct 2026 | CVSS 5.3 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it… | Fix |
| CVE-2026-112915 | 20 Oct 2026 | CVSS 5.5 | tox-dev filelockfilelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without… | Fix |