CLEANSTART-2026-AU42206: filelock is a platform-independent file lock for Python
Published Oct 30, 2026
·Updated
Security vulnerability affects the litellm-database package. filelock is a platform-independent file lock for Python.
Affected Software
1 affected componentFixes available
cleanstart/litellm-database<1.104.8-r0
1.104.8-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.104.8-r0
Event History
Oct 30, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Can this be exploited remotely?
The supplied vector lists local attack access (AV:L), so the issue is not indicated as remotely exploitable. An attacker would need local access to the affected environment.
2
What level of access and interaction does exploitation require?
Exploitation requires low privileges (PR:L) and high attack complexity (AC:H). No user interaction is required (UI:N).
3
What is the expected security impact?
The vector indicates high impact to integrity (I:H), with no indicated confidentiality or availability impact (C:N/A:N). Scope is unchanged (S:U).