Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/numpy@1.17.2
purl pkg:pypi/numpy@1.17.2
Next non-vulnerable version 1.19.1
Latest non-vulnerable version 1.22.0
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-86w7-qcmk-xyca
Aliases:
CVE-2021-41495
GHSA-5545-2q6w-2gh6
PYSEC-2021-856
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.
1.19.1
Affected by 0 other vulnerabilities.
VCID-xmpe-ucks-uubr
Aliases:
CVE-2021-41496
GHSA-f7c7-j99h-c22f
PYSEC-2021-857
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
1.19.0
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:16:14.033137+00:00 Pypa Importer Affected by VCID-86w7-qcmk-xyca https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-856.yaml 38.6.0
2026-06-02T04:16:13.647824+00:00 Pypa Importer Affected by VCID-xmpe-ucks-uubr https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-857.yaml 38.6.0