CLEANSTART-2026-HO89002: filelock is a platform-independent file lock for Python
Published Nov 12, 2026
·Updated
Security vulnerability affects the litellm-database package. filelock is a platform-independent file lock for Python.
Affected Software
1 affected componentFixes available
cleanstart/litellm-database<1.97.1-r1
1.97.1-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.97.1-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:39 AM
Data Sourced
via OSV·12:39 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access and conditions does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs local access, low privileges, and must overcome high attack complexity. No user interaction is required.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high integrity impact, meaning an attacker may be able to alter data or system state. No confidentiality or availability impact is indicated by the provided CVSS vector.