numpy vulnerabilities — 18 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →

Severity	Vulnerability	Package	Ecosystem	Disclosed	Fixed version
9.8 critical	CVE-2019-6446: Numpy Deserialization of Untrusted Data	`numpy`	PyPI	24 May 2022	No fix published
9.8 critical	CVE-2019-6446: Unsafe Usage of Pickle Module in NumPy	`numpy`	PyPI	24 May 2022	No fix published
5.5 high	CVE-2014-1858: Arbitrary file write in NumPy	`numpy`	PyPI	14 May 2022	1.8.1
5.5 high	CVE-2014-1859: Numpy arbitrary file write via symlink attack	`numpy`	PyPI	14 May 2022	1.8.1
7.5 high	CVE-2017-12852: Numpy missing input validation	`numpy`	PyPI	13 May 2022	1.13.3
7.5 high	CVE-2021-41495: NumPy NULL Pointer Dereference	`numpy`	PyPI	08 Feb 2022	1.19
5.5 medium	CVE-2021-41496: Buffer Copy without Checking Size of Input in NumPy	`numpy`	PyPI	08 Feb 2022	1.19
5.3 medium	CVE-2021-33430: NumPy Buffer Overflow (Disputed)	`numpy`	PyPI	07 Jan 2022	1.21
5.3 medium	CVE-2021-34141: Incorrect Comparison in NumPy	`numpy`	PyPI	18 Dec 2021	1.22
Unrated	CVE-2021-41495: Null Pointer Dereference in numpy.sort	`numpy`	PyPI	17 Dec 2021	1.19.1
Unrated	CVE-2021-41496: Buffer Overflow in NumPy	`numpy`	PyPI	17 Dec 2021	1.19.0
Unrated	CVE-2021-33430: Buffer Overflow in NumPy 1.9.x	`numpy`	PyPI	17 Dec 2021	1.10.0
Unrated	CVE-2021-34141: Incomplete string comparison in numpy.core component in NumPy 1.9.x	`numpy`	PyPI	17 Dec 2021	1.10.0
Unrated	CVE-2019-6446: Unsafe Usage of Pickle Module in NumPy	`numpy`	PyPI	16 Jan 2019	1.16.1
Unrated	CVE-2019-6446: Unsafe Usage of Pickle Module in NumPy	`numpy`	PyPI	16 Jan 2019	1.16.1
Unrated	CVE-2014-1859: Vulnerability in NumPy allows local users to write to arbitrary files	`numpy`	PyPI	08 Jan 2018	0bb46c1448b0d3f5453d5182a17ea7ac5854ee15
Unrated	CVE-2014-1858: Vulnerability in NumPy Allows Arbitrary File Write	`numpy`	PyPI	08 Jan 2018	0bb46c1448b0d3f5453d5182a17ea7ac5854ee15
Unrated	CVE-2017-12852: Vulnerability in numpy allows DoS attack	`numpy`	PyPI	15 Aug 2017	1.13.3

Subscribe to Vulert on Telegram

Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.

Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.