CVE-2025-71176

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

CVE-2025-71176

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

CVE-2025-71176

CVE-2025-71176 affects pytest up to 9.0.2 on UNIX: it relies on predictable temporary directories named /tmp/pytest-of-{user}, which can enable a local attacker to cause a denial of service and potentially gain privileges via insecure temporary directory handling. The provided sources describe th...

CVE-2025-71176

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

CVE-2025-71176

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

170051277-trab-final-gces (>=0.3.0, <=0.5.0), 5gasp-cli (>=0.1.0, <=0.4.0) +5618 more potentially affected by CVE-2025-71176 via pytest (>=2.5.2, <=9.0.2)

pytest PYPI version =2.5.2, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =1.0.2, =0.1.1, =0.1.0, =0.0.0, =0.1.0, =0.1.3, =0.1.15 and more Source cves: CVE-2025-71176 Source advisory: MEND:CVE-2025-71176...

Pytest security vulnerabilities

Pytest is a testing framework based on the Python language, developed by the Pytest team. Pytest versions 9.0.2 and earlier have security vulnerabilities. These vulnerabilities stem from reliance on directories with the /tmp/pytest-of-user naming pattern, which could allow local users to launch...

CVE-2025-71176: Creation of Temporary File in Directory with Insecure Permissions

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

PT-2026-3918

Name of the Vulnerable Software and Affected Versions pytest versions through 9.0.2 Description The software on UNIX systems creates directories using a predictable naming pattern, specifically '/tmp/pytest-of-user'. This design flaw allows local users to potentially disrupt service or escalate...

homeassistant-stubs (2021.6.2), pytest-homeassistant-custom-component (0.4.1) potentially affected by CVE-2025-65713 via homeassistant (2021.6.2)

homeassistant PYPI version 2021.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.6.2 - pytest-homeassistant-custom-component 0.4.1 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.11.1), pytest-homeassistant-custom-component (>=0.4.7, <=0.4.8) potentially affected by CVE-2025-65713 via homeassistant (2021.11.1)

homeassistant PYPI version 2021.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.1 - pytest-homeassistant-custom-component =0.4.7, =0.4.8 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.11.2), pytest-homeassistant-custom-component (0.4.9) potentially affected by CVE-2025-65713 via homeassistant (2021.11.2)

homeassistant PYPI version 2021.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.2 - pytest-homeassistant-custom-component 0.4.9 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.12.0b2), pytest-homeassistant-custom-component (0.5.0) potentially affected by CVE-2025-65713 via homeassistant (2021.12.0b2)

homeassistant PYPI version 2021.12.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0b2 - pytest-homeassistant-custom-component 0.5.0 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.12.0b4), pytest-homeassistant-custom-component (0.5.2) potentially affected by CVE-2025-65713 via homeassistant (2021.12.0b4)

homeassistant PYPI version 2021.12.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0b4 - pytest-homeassistant-custom-component 0.5.2 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.12.1), pytest-homeassistant-custom-component (0.5.5) potentially affected by CVE-2025-65713 via homeassistant (2021.12.1)

homeassistant PYPI version 2021.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.1 - pytest-homeassistant-custom-component 0.5.5 Source cves: CVE-2025-65713 Source advisory:...

pytest-homeassistant-custom-component (0.5.7) potentially affected by CVE-2025-65713 via homeassistant (2021.12.3)

homeassistant PYPI version 2021.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.5.7 Source cves: CVE-2025-65713 Source advisory: OSV:GHSA-PP3G-XMM4-5CW9...

homeassistant-stubs (2021.12.5), pytest-homeassistant-custom-component (0.5.9) potentially affected by CVE-2025-65713 via homeassistant (2021.12.5)

homeassistant PYPI version 2021.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.5 - pytest-homeassistant-custom-component 0.5.9 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.12.7), pytest-homeassistant-custom-component (0.5.11) potentially affected by CVE-2025-65713 via homeassistant (2021.12.7)

homeassistant PYPI version 2021.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.7 - pytest-homeassistant-custom-component 0.5.11 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2021.12.9), pytest-homeassistant-custom-component (0.5.13) potentially affected by CVE-2025-65713 via homeassistant (2021.12.9)

homeassistant PYPI version 2021.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.9 - pytest-homeassistant-custom-component 0.5.13 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.2.0b1), pytest-homeassistant-custom-component (0.6.0) potentially affected by CVE-2025-65713 via homeassistant (2022.2.0b1)

homeassistant PYPI version 2022.2.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b1 - pytest-homeassistant-custom-component 0.6.0 Source cves: CVE-2025-65713 Source advisory:...