CLEANSTART-2026-YL74393: filelock is a platform-independent file lock for Python
Published Nov 12, 2026
·Updated
Security vulnerability affects the litellm-database package. filelock is a platform-independent file lock for Python.
Affected Software
1 affected componentFixes available
cleanstart/litellm-database<1.97.1-r1
1.97.1-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.97.1-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:39 AM
Data Sourced
via OSV·12:39 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Is this exploitable remotely?
The attack vector is local, so exploitation requires local access to the affected environment rather than network-only access.
2
What access and interaction does exploitation require?
An attacker needs low-level privileges and must overcome high attack complexity. No user interaction is required.
3
What is the expected security impact?
The reported impact is limited to low confidentiality impact. Integrity and availability impacts are reported as none.