PYSEC-2021-855

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2021-855.yaml

Aliases

• CVE-2021-34141
• GHSA-fpfv-jqm9-f5jm

Published

2021-12-17T19:15:00Z

Modified

2023-11-08T04:06:07.388275Z

Details

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

References

• https://github.com/numpy/numpy/issues/18993
• https://github.com/advisories/GHSA-fpfv-jqm9-f5jm