filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

影響: pip:filelock >= 3.20.4, <= 4.2.0 → 4.2.1

On Windows, ReadWriteLock and AsyncReadWriteLock (the SQLite-backed reader/writer lock) connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: -journal, the rollback journal (pages saved to undo an interrupted write); -wal, the write-ahead log (changes kept outside the main file); and -shm, the shared-memory index of the WAL. SQLite acts on whichever of these it finds beside the database before the lock runs any statement. Another lo…

在 GitHub Advisory Database 阅读

2026/10/24 07:28，GitHub Advisory Database 发布了“filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database”（类型：漏洞公告）。严重程度为“低危”（low）。相关技术：Python、SQLite。CVE：CVE-2026-112913。