CWE-363

CWE-363 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-363, highest CVSS first.

  1. HIGH 7.1CVE-2026-112940public PoC2026-10-20

    filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrit…

    filelock

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.8CVE-2026-112938public PoC2026-11-05

    filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, On POSIX platforms, StrictSoftFileLock and AsyncStrictSoftFileLock validate the coordination directory in _ensure_protocol_directory but later reach the claims directory through …

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.3CVE-2026-112914public PoC2026-10-20

    filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowing another local user with rename access in a non-sticky lock directory to swap in a symbolic link and…

    filelock

    AI risk analysis on Exploit-DB.ai →