{"action":"Upgrade numpy to 1.10.0 or later.","affected":[{"fixed":"1.10.0","introduced":"1.9.0"}],"component":"numpy","cve_ids":["CVE-2021-33430"],"ecosystem":"PyPI","epss":0.01155,"exploited":false,"fixed_versions":["1.10.0"],"ghsa_id":"GHSA-6p56-wp2h-9hxr","id":"tcs_01M5KGFN1BP4R35SEY1VTBEBPA","modified_at":"2023-11-08T04:06:04.438690Z","published_at":"2021-12-17T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-854","https://github.com/numpy/numpy/issues/18939","https://github.com/advisories/GHSA-6p56-wp2h-9hxr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-854","url":"https://osv.dev/vulnerability/PYSEC-2021-854"}],"summary":"A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malic"}