filelock: ReadWriteLock follows a symlink at the lock path into SQLite

{
                    "vendor": "tox-dev",
                    "product": "filelock",
                    "versions": [
                        {
                            "version": ">= 3.20.4, < 4.0.9",
                            "status": "affected"
                        }
                    ]
                }