A vulnerability was found with pytest < 9.0.3

pytest has vulnerable tmpdir handling
pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.

https://docs.pytest.org/en/stable/changelog.html#pytest-9-0-3-2026-04-07
pytest-dev/pytest#14343
https://nvd.nist.gov/vuln/detail/CVE-2025-71176