filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

影響: pip:filelock >= 3.20.4, <= 4.2.0 → 4.2.1

On Windows, ReadWriteLock and AsyncReadWriteLock (the SQLite-backed reader/writer lock) connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal (pages saved to undo an interrupted write); -wal, the write-ahead log (changes kept outside the main file); and -shm, the shared-memory index of the WAL. SQLite acts on whichever of these it finds beside the database before the lock runs any statement. Another lo…

Read on GitHub Advisory Database

On 10/24/2026, 07:28 AM, GitHub Advisory Database published "filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database" (type: Advisory). Severity is "Low" (low). Related technologies: Python, SQLite. CVE: CVE-2026-112913.