| Version | Supported |
|---|---|
| 3.8 + | ✅ |
| < 3.8 | ❌ |
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
Security: tox-dev/filelock
Security
.github/SECURITY.md
-
Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLockGHSA-qmgc-5h2g-mvrw published
Jan 9, 2026 by gaborbernatModerate -
TOCTOU race condition allows symlink attacks during lock file creationGHSA-w853-jp5j-5j7f published
Dec 15, 2025 by gaborbernatModerate
Learn more about advisories related to tox-dev/filelock in the GitHub Advisory Database