Search for packages
| purl | pkg:pypi/numpy@1.2.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4sb5-1fc6-9qbp
Aliases: CVE-2021-41495 GHSA-5545-2q6w-2gh6 PYSEC-2021-856 |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
|
VCID-ap52-g1sg-aqd2
Aliases: CVE-2017-12852 GHSA-frgw-fgh6-9g52 PYSEC-2017-1 |
Affected by 6 other vulnerabilities. |
|
|
VCID-cz85-6b1s-8kew
Aliases: CVE-2021-41496 GHSA-f7c7-j99h-c22f PYSEC-2021-857 |
Affected by 0 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
|
VCID-em5k-c24m-nufw
Aliases: PYSEC-2019-38 |
** DISPUTED ** An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources. |
Affected by 4 other vulnerabilities. |
|
VCID-gv2v-hhr3-uqam
Aliases: CVE-2014-1858 GHSA-cw6w-4rcx-xphc PYSEC-2018-33 |
__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file. |
Affected by 6 other vulnerabilities. |
|
VCID-r8yj-jyze-gbfz
Aliases: CVE-2021-34141 GHSA-fpfv-jqm9-f5jm PYSEC-2021-855 |
Affected by 7 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
|
VCID-tpq5-hxyq-xych
Aliases: CVE-2019-6446 GHSA-9fq2-x9r6-wfmf PYSEC-2019-108 |
Affected by 4 other vulnerabilities. |
|
|
VCID-tzbz-hnwu-zbd6
Aliases: CVE-2014-1859 GHSA-2fc2-6r4j-p65h PYSEC-2018-34 |
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file. |
Affected by 6 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||