Skip to content

NumPy security advisories

8 advisories · none critical or high in 12 months · latest May 24, 2022

8 advisories

DateAdvisory
May 242022Numpy Deserialization of Untrusted Data
CVE-2019-6446Critical9.8fixed in 1.16.3
May 142022Arbitrary file write in NumPy
CVE-2014-1858High5.5fixed in 1.8.1
May 142022Numpy arbitrary file write via symlink attack
CVE-2014-1859High5.5fixed in 1.8.1
May 132022Numpy missing input validation
CVE-2017-12852High7.5fixed in 1.13.3
Feb 82022NumPy NULL Pointer Dereference
CVE-2021-41495High7.5fixed in 1.19
Feb 82022Buffer Copy without Checking Size of Input in NumPy
CVE-2021-41496Medium5.5fixed in 1.19
Jan 72022NumPy Buffer Overflow (Disputed)
CVE-2021-33430Medium5.3fixed in 1.21
Dec 182021Incorrect Comparison in NumPy
CVE-2021-34141Medium5.3fixed in 1.22
About NumPy

The array library under scientific Python.

Packages watched: numpy (PyPI).

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.