Vulnerabilities for filelock

First version without a known vulnerability: 3.20.3

Details

• GHSA-qmgc-5h2g-mvrw2026-01-13

  filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

  Fixed in: 3.20.3

• GHSA-w853-jp5j-5j7f2025-12-16

  filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

  Fixed in: 3.20.1