Skip to content

pytest (PyPI)

The pytest framework makes it easy to write small tests, yet scales to support complex functional testing

Advisories
3
Latest version
9.2.0
Released Oct 27, 2026
License
MIT
OpenSSF Scorecard
7.0 / 10

How to fix

Upgrading to 9.0.3 or later clears every advisory below that has a fix.

Upgrade commands
pip
pip install --upgrade "pytest>=9.2.0"
poetry
poetry add "pytest>=9.2.0"
uv
uv add "pytest>=9.2.0"

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-6w46-j5rx-g56g
pytest has vulnerable tmpdir handling
Medium
EPSS 0.15%
< 9.0.3
9.0.3
GHSA-6w46-j5rx-g56g
pytest has vulnerable tmpdir handling
Medium
EPSS 0.15%
< 9.0.3
9.0.3
GHSA-6w46-j5rx-g56g
pytest has vulnerable tmpdir handling
Medium
EPSS 0.15%
< 9.0.3
9.0.3

Source: https://github.com/pytest-dev/pytest

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor