numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

CLIPGuard

CLIPGuard Installation 1. Create Virtual Environment Recommended python -m venv clipguardenv source clipguardenv/bin/activate 2. Install PyTorch CUDA Example pip install torch torchvision --index-url https://download.pytorch.org/whl/cu121 For CPU: pip install torch torchvision 3. Install...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

The asteval Python expression evaluator (prior to version 1.0.9 ) contains a sandbox escape vulnerability in asteval/astutils.py . When numpy is enabled, the default Interpreter exposes a ctypes type and allows memory access via from_address. While safe_getattr blocks the ctypes module, it fails ...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734: Protection Mechanism Failure

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

cssfinder (>=0.3.0, <=0.8.0), cssfinder-backend-numpy (>=0.1.1, <=0.5.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (58.1.0)

weasyprint PYPI version 58.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cssfinder =0.3.0, =0.1.1, =0.2.0, =0.3.0 - wh-m2p 0.0.1a0 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

CLSA-2026-1791368060 TuxCare security update for numpy (1 CVE)

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare...

PYSEC-2026-4139 psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_0232)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260232 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2019_3335)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193335 advisory. numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code execution CVE-2019-6446 python: CRLF injection via the...

Rocky Linux 8.8 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_1149)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261149 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: python3-numpy / python3-numpy-debuginfo / python3-numpy-f2py (crlsa-2019_3704)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20193704 advisory. numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code execution CVE-2019-6446 Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0771)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260771 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2022-45061, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python2-numpy / python2-numpy-debuginfo / python2-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0175)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260175 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-24329, CVE-2015-20107, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python38-numpy / python38-numpy-debuginfo / python38-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0209)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260209 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2022-45061, CVE-2021-28861,...

sqli-xss-detection

How to run it Open a terminal in the project root: sqlixssdete...

Improper Check for Unusual or Exceptional Conditions

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the disaggregated serving endpoint /inference/v1/generate in...