Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/numpy@1.14.0rc1
purl pkg:pypi/numpy@1.14.0rc1
Tags Ghost
Next non-vulnerable version 1.22.0
Latest non-vulnerable version 1.22.0
Risk 4.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-86w7-qcmk-xyca
Aliases:
CVE-2021-41495
GHSA-5545-2q6w-2gh6
PYSEC-2021-856
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.
1.19
Affected by 0 other vulnerabilities.
1.19.0
Affected by 3 other vulnerabilities.
1.19.1
Affected by 2 other vulnerabilities.
VCID-ms8d-nk6m-hfa9
Aliases:
PYSEC-2019-38
** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.
1.16.1
Affected by 4 other vulnerabilities.
VCID-vx94-afb7-ybdw
Aliases:
CVE-2019-6446
GHSA-9fq2-x9r6-wfmf
PYSEC-2019-108
** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.
1.16.1
Affected by 4 other vulnerabilities.
VCID-xmpe-ucks-uubr
Aliases:
CVE-2021-41496
GHSA-f7c7-j99h-c22f
PYSEC-2021-857
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
1.19
Affected by 0 other vulnerabilities.
1.19.0
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T17:01:24.818117+00:00 PyPI Importer Affected by VCID-xmpe-ucks-uubr https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-06-05T17:01:24.648763+00:00 PyPI Importer Affected by VCID-86w7-qcmk-xyca https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-06-05T16:55:14.794885+00:00 PyPI Importer Affected by VCID-ms8d-nk6m-hfa9 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-06-05T16:55:14.642571+00:00 PyPI Importer Affected by VCID-vx94-afb7-ybdw https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-06-02T04:16:13.928534+00:00 Pypa Importer Affected by VCID-86w7-qcmk-xyca https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-856.yaml 38.6.0
2026-06-02T04:16:13.531557+00:00 Pypa Importer Affected by VCID-xmpe-ucks-uubr https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-857.yaml 38.6.0
2026-06-02T04:05:30.178070+00:00 Pypa Importer Affected by VCID-vx94-afb7-ybdw https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2019-108.yaml 38.6.0