PyPI/numpy CVE-2017-12852: unknown, EPSS 2.74%
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Action: Upgrade numpy to 1.13.3 or later.
pip install numpy==1.13.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.3 | - |
Fixed versions
| 1.13.3 |
Sources
- osv: PYSEC-2017-1
- https://github.com/numpy/numpy/issues/9560#issuecomment-322395292
- https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852
- https://github.com/advisories/GHSA-frgw-fgh6-9g52
CVE-2017-12852 · published · modified · JSON