{"action":"Upgrade numpy to 1.10.0 or later.","affected":[{"fixed":"1.10.0","introduced":"1.9.0"}],"component":"numpy","cve_ids":["CVE-2021-34141"],"ecosystem":"PyPI","epss":0.01679,"exploited":false,"fixed_versions":["1.10.0"],"ghsa_id":"GHSA-fpfv-jqm9-f5jm","id":"tcs_01M5KGFN648KVHMJJATBYM83W5","modified_at":"2023-11-08T04:06:07.388275Z","published_at":"2021-12-17T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-855","https://github.com/numpy/numpy/issues/18993","https://github.com/advisories/GHSA-fpfv-jqm9-f5jm"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-855","url":"https://osv.dev/vulnerability/PYSEC-2021-855"}],"summary":"Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects."}