filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

影響: pip:filelock >= 3.20.4, <= 4.2.0 → 4.2.1

On Windows, ReadWriteLock and AsyncReadWriteLock (the SQLite-backed reader/writer lock) connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal (pages saved to undo an interrupted write); -wal, the write-ahead log (changes kept outside the main file); and -shm, the shared-memory index of the WAL. SQLite acts on whichever of these it finds beside the database before the lock runs any statement. Another lo…

GitHub Advisory Databaseで読む

2026/10/24 07:28、GitHub Advisory Databaseが「filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「注意」(low) です。関連する技術: Python、SQLite。CVE: CVE-2026-112913。