Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.3	EPSS 0.2%	CVE-2025-68146SUSE mlx-lm · Security update for python-filelock Medium6.3EPSS 0.2%2026-01-30GCVE DatabaseCVE-2025-68146 This update for python-filelock fixes the following issues: - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files (bsc#1255244). - CVE-2026-22701: TOCTOU race condition in the SoftFileLock implementation (bsc#1256457). EPSS 0.2%Report on CVE-2025-68146 Vulnerability SUSE Product Security Team	GCVE Database	2026-01-30
Medium	4.5	EPSS 0.1%	CVE-2026-22702SUSE virtualenv · Security update for python-virtualenv Medium4.5EPSS 0.1%2026-01-22GCVE DatabaseCVE-2026-22702 This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458). EPSS 0.1%Report on CVE-2026-22702 Vulnerability SUSE Product Security Team	GCVE Database	2026-01-22
High	8.4	EPSS 1.6%	CVE-2024-53899Red Hat Security Advisory: python36:3.6 security update High8.4EPSS 1.6%2024-12-16GCVE DatabaseCVE-2024-53899 Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 1.6%Report on CVE-2024-53899 Vulnerability Red Hat Product Security CWE-78	GCVE Database	2024-12-16

Page 1 of 1