Launchpad.net

CVE 2022-48682

In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.

See the CVE page on Mitre.org for more details.