numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

CLSA-2026-1793700288 TuxCare security update for numpy (7 CVEs)

TuxCare rebuilt numpy to address 7 CVEs. Fixed in 1.21.6.post1+tuxcare...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

CLIPGuard

CLIPGuard Installation 1. Create Virtual Environment Recommended python -m venv clipguardenv source clipguardenv/bin/activate 2. Install PyTorch CUDA Example pip install torch torchvision --index-url https://download.pytorch.org/whl/cu121 For CPU: pip install torch torchvision 3. Install...

CLSA-2026-1793175390 TuxCare security update for numpy (8 CVEs)

TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.0.2.post1+tuxcare...

CLSA-2026-1793175147 TuxCare security update for numpy (8 CVEs)

TuxCare rebuilt numpy to address 8 CVEs. Fixed in 2.1.3.post1+tuxcare...

cssfinder (>=0.3.0, <=0.8.0), cssfinder-backend-numpy (>=0.1.1, <=0.5.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (58.1.0)

weasyprint PYPI version 58.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cssfinder =0.3.0, =0.1.1, =0.2.0, =0.3.0 - wh-m2p 0.0.1a0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

The asteval Python expression evaluator (prior to version 1.0.9 ) contains a sandbox escape vulnerability in asteval/astutils.py . When numpy is enabled, the default Interpreter exposes a ctypes type and allows memory access via from_address. While safe_getattr blocks the ctypes module, it fails ...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734: Protection Mechanism Failure

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

cssfinder (>=0.3.0, <=0.8.0), cssfinder-backend-numpy (>=0.1.1, <=0.5.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (58.1.0)

weasyprint PYPI version 58.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cssfinder =0.3.0, =0.1.1, =0.2.0, =0.3.0 - wh-m2p 0.0.1a0 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

CLSA-2026-1791368060 TuxCare security update for numpy (1 CVE)

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare...

PT-2026-116403

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare...

PYSEC-2026-4139 psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

Rocky Linux 8.8 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_1149)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261149 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0771)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260771 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2022-45061, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_0232)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260232 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding description blo...