{"action":"Upgrade cvxopt to 1.2.7+dfsg-1 or later.","affected":[{"fixed":"1.2.7+dfsg-1","introduced":"0"}],"component":"cvxopt","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.2.7+dfsg-1"],"id":"tcs_01M5NG07H36Q9P4DB6PZ2XBBMW","modified_at":"2026-10-23T18:03:51.281396533Z","published_at":"2021-12-17T21:15:07.777Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-41500","https://security-tracker.debian.org/tracker/CVE-2021-41500"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-41500#Debian:13/cvxopt","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-41500"}],"summary":"Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attack"}