Lack of data validation In numpy
Description
Incorrect Comparison in NumPy Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 pypi | >=0 <1.22 | 1.22 | |
 debian 13 | =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - | |
debian 11 | =1:1.19.5-1 || =1:1.20.0-1 || =1:1.20.2-1 || =1:1.21.2-1 || =1:1.21.2-2 || =1:1.21.2-3 || =1:1.21.4-1 || =1:1.21.4-2 || =1:1.21.5-1 || =1:1.21.5-2 || =1:1.22.1-1 || =1:1.23.1-1 || =1:1.23.2-1 || =1:1.23.3-1 || =1:1.23.5-1 || =1:1.23.5-2 || =1:1.24.0-1 || =1:1.24.1-1 || =1:1.24.1-2 || =1:1.24.2-1 || =1:1.24.2-1~hurd.1 || =1:1.24.2-2 || =1:1.24.2-2+hurd.1 || =1:1.24.2-3 || =1:1.26.3-1 || =1:1.26.3-2 || =1:1.26.4+ds-1 || =1:1.26.4+ds-10 || =1:1.26.4+ds-11 || =1:1.26.4+ds-12 || =1:1.26.4+ds-13 || =1:1.26.4+ds-2 || =1:1.26.4+ds-3 || =1:1.26.4+ds-4 || =1:1.26.4+ds-5 || =1:1.26.4+ds-6 || =1:1.26.4+ds-7 || =1:1.26.4+ds-8 || =1:1.26.4+ds-9 || =1:1.26.4+ds-9~exp1 || =1:2.1.0+ds-1 || =1:2.1.0+ds-2 || =1:2.1.1+ds-1 || =1:2.1.1+ds-2 || =1:2.1.1+ds-3 || =1:2.1.2+ds-1 || =1:2.1.3+ds-1 || =1:2.1.3+ds-2 || =1:2.2.0+ds-1 || =1:2.2.1+ds-1 || =1:2.2.1+ds-2 || =1:2.2.2+ds-1 || =1:2.2.2+ds-2 || =1:2.2.3+ds-1 || =1:2.2.3+ds-2 || =1:2.2.3+ds-3 || =1:2.2.3+ds-4 || =1:2.2.3+ds-5 || =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - | |
debian 12 | =1:1.24.2-1 || =1:1.24.2-1+deb12u1 || =1:1.24.2-2 || =1:1.24.2-2+hurd.1 || =1:1.24.2-3 || =1:1.26.3-1 || =1:1.26.3-2 || =1:1.26.4+ds-1 || =1:1.26.4+ds-10 || =1:1.26.4+ds-11 || =1:1.26.4+ds-12 || =1:1.26.4+ds-13 || =1:1.26.4+ds-2 || =1:1.26.4+ds-3 || =1:1.26.4+ds-4 || =1:1.26.4+ds-5 || =1:1.26.4+ds-6 || =1:1.26.4+ds-7 || =1:1.26.4+ds-8 || =1:1.26.4+ds-9 || =1:1.26.4+ds-9~exp1 || =1:2.1.0+ds-1 || =1:2.1.0+ds-2 || =1:2.1.1+ds-1 || =1:2.1.1+ds-2 || =1:2.1.1+ds-3 || =1:2.1.2+ds-1 || =1:2.1.3+ds-1 || =1:2.1.3+ds-2 || =1:2.2.0+ds-1 || =1:2.2.1+ds-1 || =1:2.2.1+ds-2 || =1:2.2.2+ds-1 || =1:2.2.2+ds-2 || =1:2.2.3+ds-1 || =1:2.2.3+ds-2 || =1:2.2.3+ds-3 || =1:2.2.3+ds-4 || =1:2.2.3+ds-5 || =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - | |
debian 14 | =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - | |
 rpm rhel9 | - | - | |
rpm rhel8 | - | - |
Aliases
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.