CLEANSTART-2026-ZN36596: filelock is a platform-independent file lock for Python
Published Oct 30, 2026
·Updated
Security vulnerability affects the litellm-database package. filelock is a platform-independent file lock for Python.
Affected Software
1 affected componentFixes available
cleanstart/litellm-database<1.104.8-r0
1.104.8-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/litellm-databaseto a version that resolves this vulnerability.Fixed in 1.104.8-r0
Event History
Oct 30, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability is locally exploitable and requires low privileges. No user interaction is required.
2
What is the expected security impact if exploitation succeeds?
The stated impact is low confidentiality impact and high integrity impact. Availability is not affected, and the impact remains within the vulnerable security authority.