SciPy — CVE history (PyPI)
SciPy
3 CVEs affect the SciPy PyPI package (highest CVSS 9.8). Latest disclosed: 2023-07-06. Full CVE history sourced from NVD.
Summary
- Package
SciPy(PyPI)- Total CVEs
3- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.8- Latest disclosed
- 2023-07-06
Recent CVEs (top 3)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-29824 | Critical | 9.8 | — | 2023-07-06 | A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. |
CVE-2023-25399 | Medium | 5.5 | — | 2023-07-05 | A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. |
CVE-2013-4251 | High | 7.8 | — | 2019-11-04 | The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories. |
All-time worst (top 3 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2023-29824 | Critical | 9.8 | — | 2023-07-06 | A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. |
CVE-2013-4251 | High | 7.8 | — | 2019-11-04 | The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories. |
CVE-2023-25399 | Medium | 5.5 | — | 2023-07-05 | A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. |