{"action":"Upgrade numpy to 1.13.3 or later.","affected":[{"fixed":"1.13.3","introduced":"0"}],"component":"numpy","cve_ids":["CVE-2017-12852"],"ecosystem":"PyPI","epss":0.02737,"exploited":false,"fixed_versions":["1.13.3"],"ghsa_id":"GHSA-frgw-fgh6-9g52","id":"tcs_01M5KG6ZM4MD5F6K4Y18EC8VA1","modified_at":"2023-11-08T03:58:54.336802Z","published_at":"2017-08-15T16:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-1","https://github.com/numpy/numpy/issues/9560#issuecomment-322395292","https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852","https://github.com/advisories/GHSA-frgw-fgh6-9g52"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2017-1","url":"https://osv.dev/vulnerability/PYSEC-2017-1"}],"summary":"The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack."}