pytest-qt-app@1.0.1 vulnerabilities

QT app fixture for py.test

Direct Vulnerabilities

Known vulnerabilities in the pytest-qt-app package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Execution

pytest-qt-app is session-scoped by default and run in a subprocess and temp dir to cleanup when it's done.

Affected versions of this package are vulnerable to Arbitrary Code Execution attacks. It would run subprocess with shell=True, allowing an attacker to insert shell commands in the function.

[,1.1.0)