Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-71176

pytest: pytest: Denial of Service or Privilege Escalation via insecure temporary directory handling

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pytest
Products
Py
CVE-2020-29651

python-py: ReDoS in the py.path.svnwc component via mailicious input to blame functionality

A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.

CVSS 3.1 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject Oracle Pytest
Products
Fedora Zfs Storage Appliance Kit Py
CVE-2022-42969

py: ReDoS in py library when used with subversion

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS 3.1 · 5.3 Medium EPSS 2.1% KEV · Not listed
Vendors
Pytest
Products
Py