CVE-2021-34141
Fixed in a distro release EPSS 2%
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."
Products: numpy, oracle communications_cloud_native_core_policy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | numpy | 1.22 |
| PyPI | numpy | 1.10.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | numpy | no fix |
| Debian 13 | numpy | no fix |
| Debian 14 | numpy | no fix |
| Ubuntu 20.04 LTS | numpy | 1:1.17.4-5ubuntu3.1 |
| Ubuntu 22.04 LTS | numpy | 1:1.21.5-1ubuntu22.04.1 |