{"schema_version":1,"title":"Tox-Dev vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Tox-Dev: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112938, was published on 5 November 2026. 14 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/tox-dev","json_url":"https://junglewise.ai/threats/vendors/tox-dev.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/tox-dev","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":1,"all_time":14,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":14,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2026-112938","cvss":5.8,"slug":"cve-2026-112938-filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in","title":"filelock StrictSoftFileLock symlink race privilege escalation","severity":"medium","exploited":false,"published_at":"2026-11-05T22:17:47.213+00:00","url":"https://junglewise.ai/threats/cve-2026-112938-filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in"},{"cve":"CVE-2026-112910","cvss":5.3,"slug":"cve-2026-112910-filelock-windowsfilelock-ignores-mode-a-0o600-lock-file-and-the","title":"filelock WindowsFileLock mode parameter permission enforcement failure","severity":"medium","exploited":false,"published_at":"2026-11-05T22:17:46.877+00:00","url":"https://junglewise.ai/threats/cve-2026-112910-filelock-windowsfilelock-ignores-mode-a-0o600-lock-file-and-the"},{"cve":"CVE-2026-112908","cvss":5.3,"slug":"cve-2026-112908-filelock-strictsoftfilelock-creates-its-claim-directories","title":"filelock StrictSoftFileLock directory permission bypass","severity":"medium","exploited":false,"published_at":"2026-11-05T22:17:46.693+00:00","url":"https://junglewise.ai/threats/cve-2026-112908-filelock-strictsoftfilelock-creates-its-claim-directories"},{"cve":"CVE-2026-112940","cvss":7.1,"epss":0.0019,"slug":"cve-2026-112940-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock SQLite database overwrite in POSIX","severity":"high","exploited":false,"published_at":"2026-10-20T15:17:16.827+00:00","url":"https://junglewise.ai/threats/cve-2026-112940-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112939","cvss":4.7,"epss":0.0014,"slug":"cve-2026-112939-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock SoftFileLock PID spoofing privilege escalation","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.663+00:00","url":"https://junglewise.ai/threats/cve-2026-112939-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112937","cvss":6.1,"epss":0.0016,"slug":"cve-2026-112937-filelock-is-a-platform-independent-file-lock-for-python-from-4-1","title":"filelock ReadWriteLock insecure temporary directory cleanup","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.527+00:00","url":"https://junglewise.ai/threats/cve-2026-112937-filelock-is-a-platform-independent-file-lock-for-python-from-4-1"},{"cve":"CVE-2026-112936","cvss":6.1,"epss":0.0023,"slug":"cve-2026-112936-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock symlink following vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.383+00:00","url":"https://junglewise.ai/threats/cve-2026-112936-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112935","cvss":4.7,"epss":0.0013,"slug":"cve-2026-112935-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock SoftFileLock file lock bypass","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.243+00:00","url":"https://junglewise.ai/threats/cve-2026-112935-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112934","cvss":6.1,"epss":0.0023,"slug":"cve-2026-112934-filelock-is-a-platform-independent-file-lock-for-python-from-4-0","title":"filelock SoftReadWriteLock directory traversal and lock stalling","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.1+00:00","url":"https://junglewise.ai/threats/cve-2026-112934-filelock-is-a-platform-independent-file-lock-for-python-from-4-0"},{"cve":"CVE-2026-112915","cvss":5.5,"epss":0.0022,"slug":"cve-2026-112915-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock unbounded SQLite query denial of service","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.953+00:00","url":"https://junglewise.ai/threats/cve-2026-112915-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112914","cvss":5.3,"epss":0.0016,"slug":"cve-2026-112914-filelock-is-a-platform-independent-file-lock-for-python-from-4-1","title":"filelock SoftFileLock symlink attack via stale marker","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.81+00:00","url":"https://junglewise.ai/threats/cve-2026-112914-filelock-is-a-platform-independent-file-lock-for-python-from-4-1"},{"cve":"CVE-2026-112911","cvss":6.3,"epss":0.0015,"slug":"cve-2026-112911-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock StrictSoftFileLock directory adoption vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.473+00:00","url":"https://junglewise.ai/threats/cve-2026-112911-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112909","cvss":6.1,"epss":0.0022,"slug":"cve-2026-112909-filelock-is-a-platform-independent-file-lock-for-python-prior-to","title":"filelock UnixFileLock file truncation on rename","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.313+00:00","url":"https://junglewise.ai/threats/cve-2026-112909-filelock-is-a-platform-independent-file-lock-for-python-prior-to"},{"cve":"CVE-2026-112906","cvss":4.7,"epss":0.0021,"slug":"cve-2026-112906-filelock-is-a-platform-independent-file-lock-for-python-from-4-1","title":"filelock SoftFileLock stale marker reuse race condition","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.163+00:00","url":"https://junglewise.ai/threats/cve-2026-112906-filelock-is-a-platform-independent-file-lock-for-python-from-4-1"}],"vendor":{"hub":true,"name":"Tox-Dev","slug":"tox-dev","description":"Community-driven organization maintaining testing and development tools for Python.","url":"https://junglewise.ai/threats/vendors/tox-dev"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-112940","cvss":7.1,"epss":0.0019,"slug":"cve-2026-112940-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock SQLite database overwrite in POSIX","severity":"high","exploited":false,"published_at":"2026-10-20T15:17:16.827+00:00","url":"https://junglewise.ai/threats/cve-2026-112940-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112911","cvss":6.3,"epss":0.0015,"slug":"cve-2026-112911-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock StrictSoftFileLock directory adoption vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.473+00:00","url":"https://junglewise.ai/threats/cve-2026-112911-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112936","cvss":6.1,"epss":0.0023,"slug":"cve-2026-112936-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock symlink following vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.383+00:00","url":"https://junglewise.ai/threats/cve-2026-112936-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112934","cvss":6.1,"epss":0.0023,"slug":"cve-2026-112934-filelock-is-a-platform-independent-file-lock-for-python-from-4-0","title":"filelock SoftReadWriteLock directory traversal and lock stalling","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.1+00:00","url":"https://junglewise.ai/threats/cve-2026-112934-filelock-is-a-platform-independent-file-lock-for-python-from-4-0"},{"cve":"CVE-2026-112909","cvss":6.1,"epss":0.0022,"slug":"cve-2026-112909-filelock-is-a-platform-independent-file-lock-for-python-prior-to","title":"filelock UnixFileLock file truncation on rename","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.313+00:00","url":"https://junglewise.ai/threats/cve-2026-112909-filelock-is-a-platform-independent-file-lock-for-python-prior-to"},{"cve":"CVE-2026-112937","cvss":6.1,"epss":0.0016,"slug":"cve-2026-112937-filelock-is-a-platform-independent-file-lock-for-python-from-4-1","title":"filelock ReadWriteLock insecure temporary directory cleanup","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:16.527+00:00","url":"https://junglewise.ai/threats/cve-2026-112937-filelock-is-a-platform-independent-file-lock-for-python-from-4-1"},{"cve":"CVE-2026-112938","cvss":5.8,"slug":"cve-2026-112938-filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in","title":"filelock StrictSoftFileLock symlink race privilege escalation","severity":"medium","exploited":false,"published_at":"2026-11-05T22:17:47.213+00:00","url":"https://junglewise.ai/threats/cve-2026-112938-filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in"},{"cve":"CVE-2026-112915","cvss":5.5,"epss":0.0022,"slug":"cve-2026-112915-filelock-is-a-platform-independent-file-lock-for-python-from-3","title":"filelock ReadWriteLock unbounded SQLite query denial of service","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.953+00:00","url":"https://junglewise.ai/threats/cve-2026-112915-filelock-is-a-platform-independent-file-lock-for-python-from-3"},{"cve":"CVE-2026-112914","cvss":5.3,"epss":0.0016,"slug":"cve-2026-112914-filelock-is-a-platform-independent-file-lock-for-python-from-4-1","title":"filelock SoftFileLock symlink attack via stale marker","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:15.81+00:00","url":"https://junglewise.ai/threats/cve-2026-112914-filelock-is-a-platform-independent-file-lock-for-python-from-4-1"},{"cve":"CVE-2026-112910","cvss":5.3,"slug":"cve-2026-112910-filelock-windowsfilelock-ignores-mode-a-0o600-lock-file-and-the","title":"filelock WindowsFileLock mode parameter permission enforcement failure","severity":"medium","exploited":false,"published_at":"2026-11-05T22:17:46.877+00:00","url":"https://junglewise.ai/threats/cve-2026-112910-filelock-windowsfilelock-ignores-mode-a-0o600-lock-file-and-the"}],"generated_at":"2026-11-13T03:07:00.155039+00:00","technologies":[{"name":"Tox-Dev Filelock","slug":"tox-dev-filelock","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/tox-dev-filelock"}]}