PYSEC-2021-855

At a glance

Published: 2021-12-17 19:15 UTC
Updated: 2023-11-08 04:06 UTC
CVE: CVE-2021-34141
Aliases: GHSA-fpfv-jqm9-f5jm

Description

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

Affected packages

Package	Versions
PyPI · numpy	introduced 1.9.0, fixed 1.10.0

References

https://github.com/numpy/numpy/issues/18993 REPORT
https://github.com/advisories/GHSA-fpfv-jqm9-f5jm ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — PyPA Advisory Database