CVE-2026-22701: Os Open Without Nofollowcve-2026-22701-os-open-without-nofollow
Opening a file using `os.O_CREAT` without `os.O_NOFOLLOW` can be vulnerable to TOCTOU symlink attacks. If an attacker can replace the file with a symlink before creation, the operation may target an unexpected file. Include `os.O_NOFOLLOW` in the flags, and consider using `getattr(os, "O_NOFOLLOW", 0)` for cross-platform compatibility.
