The Lab · 2026-04-16 05:22:36 · GitHub Issues
A critical security vulnerability, CVE-2025-71176, has been identified in the widely-used Python testing framework, pytest, affecting versions through 9.0.2 on UNIX systems. The flaw centers on the framework's predictable use of directories named `/tmp/pytest-of-{user}`, creating a potential vector for local users to e...
The Lab · 2026-04-26 08:54:08 · GitHub Issues
A critical security vulnerability in the pytest testing framework through version 9.0.2 has been identified, prompting an urgent update to version 9.0.3. The flaw, tracked as CVE-2025-71176, stems from pytest's reliance on predictable temporary directory naming conventions on UNIX systems, specifically directories foll...
The Lab · 2026-05-07 10:31:40 · GitHub Issues
A high-severity shell injection vulnerability has been identified in the Unix implementation of `GitOperations::exec` within `src/git/operations.cpp`. The method constructs shell commands using `popen` with string-interpolated arguments, directly incorporating user-supplied parameters such as branch names and commit me...