{"id":"ghsa-ghsa-9vhv-jxww-xfm5","seq":661278,"kind":"advisory","title":"filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database","url":"https://github.com/advisories/GHSA-9vhv-jxww-xfm5","permalink":"https://vulnpulse.app/items/ghsa-ghsa-9vhv-jxww-xfm5","summary":"影響: pip:filelock >= 3.20.4, <= 4.2.0 → 4.2.1\nOn Windows, ReadWriteLock and AsyncReadWriteLock (the SQLite-backed reader/writer lock) connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal (pages saved to undo an interrupted write); -wal, the write-ahead log (changes kept outside the main file); and -shm, the shared-memory index of the WAL. SQLite acts on whichever of these it finds beside the database before the lock runs any statement. Another lo…","severity":"low","techs":["python","sqlite"],"cves":["CVE-2026-112913"],"tags":["GHSA-9vhv-jxww-xfm5","filelock"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T22:28:19.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}