The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| logilab-common(PyPI) | 0 | 0.61.0 | N/A |
CVSS Metrics