Detections
Analytics
SCA: security update for filelock (GHSA-9c4x-gm8v-wgc4)
medium Tenable Self-Hosted Container Security Plugin ID 477784
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock
versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created
first by another local user in a shared parent directory, allowing that user to alter protocol state and
admit concurrent holders. This issue is fixed in version 4.2.1. (CVE-2026-112911)
Solution
Update the filelock library and its related packages to version 4.2.1 or later.See Also
Plugin Details
Severity: Medium
ID: 477784
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/29/2026
Updated: 10/29/2026
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.52
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.3
Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:C/A:C
CVSS Score Source: CVE-2026-112911
CVSS v3
Risk Factor: Medium
Base Score: 6.3
Temporal Score: 5.7
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/28/2026
Vulnerability Publication Date: 10/20/2026
Reference Information
CVE: CVE-2026-112911
cwe: CWE-283