Security vulnerability - tempfiles.mktemp

[claytonparnell]

Hello, our package sagemaker-python-sdk uses multiprocess, and was flagged for a vulnerability, due to the use of tempfile.mktemp() here and in several other places. You can read more about the vulnerability here. Can you please refactor to avoid this security vulnerability?

Thanks!

[mmckerns]

@claytonparnell: Not sure if you read our security policy: https://github.com/uqfoundation/.github/blob/main/SECURITY.md

The lines you refer to are exactly the same as is in the stdlib, and if you read the relevant discussion is here:
python/cpython#87770

and here, it suggests that the code is as secure as possible:
python/cpython#86444

Hence, python chose not to change the exact lines in multiprocessing. This will need some forensics.