Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/numpy@1.14.6
purl pkg:pypi/numpy@1.14.6
Next non-vulnerable version 1.19.1
Latest non-vulnerable version 1.22.0
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-86w7-qcmk-xyca
Aliases:
CVE-2021-41495
GHSA-5545-2q6w-2gh6
PYSEC-2021-856
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.
1.19.1
Affected by 0 other vulnerabilities.
VCID-vx94-afb7-ybdw
Aliases:
CVE-2019-6446
PYSEC-2019-108
** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.
1.16.1
Affected by 2 other vulnerabilities.
VCID-xmpe-ucks-uubr
Aliases:
CVE-2021-41496
GHSA-f7c7-j99h-c22f
PYSEC-2021-857
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
1.19.0
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:16:13.953855+00:00 Pypa Importer Affected by VCID-86w7-qcmk-xyca https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-856.yaml 38.6.0
2026-06-02T04:16:13.558336+00:00 Pypa Importer Affected by VCID-xmpe-ucks-uubr https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-857.yaml 38.6.0
2026-06-02T04:05:30.209211+00:00 Pypa Importer Affected by VCID-vx94-afb7-ybdw https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2019-108.yaml 38.6.0