CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

CVE-2026-102734 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-102734

The asteval Python expression evaluator (prior to version 1.0.9 ) contains a sandbox escape vulnerability in asteval/astutils.py . When numpy is enabled, the default Interpreter exposes a ctypes type and allows memory access via from_address. While safe_getattr blocks the ctypes module, it fails ...

numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

CLIPGuard

CLIPGuard Installation 1. Create Virtual Environment Recommended python -m venv clipguardenv source clipguardenv/bin/activate 2. Install PyTorch CUDA Example pip install torch torchvision --index-url https://download.pytorch.org/whl/cu121 For CPU: pip install torch torchvision 3. Install...

CLSA-2026-1791368060 TuxCare security update for numpy (1 CVE)

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post5+tuxcare...

PYSEC-2026-4139 psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

Rocky Linux 8.8 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_1149)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261149 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding description bloc...

Rocky Linux 8 [CIQ] Security Update: Cython-debugsource / PyYAML-debugsource / babel / etc Multiple Vulnerabilities (crlsa-2019_3335)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193335 advisory. numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code execution CVE-2019-6446 python: CRLF injection via the...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc (ciqsa-2026_0232)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260232 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2021-28861. Tenable has extracted the preceding description blo...

Rocky Linux 8.6 [CIQ] Security Update: python39-numpy / python39-numpy-debuginfo / python39-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0771)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260771 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8.6 [CIQ] Security Update: python2-numpy / python2-numpy-debuginfo / python2-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0175)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260175 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2023-32681, CVE-2022-45061,...

Rocky Linux 8.6 [CIQ] Security Update: python38-numpy / python38-numpy-debuginfo / python38-numpy-doc / etc Multiple Vulnerabilities (ciqsa-2026_0209)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260209 advisory. This advisory aggregates security fixes for the numpy SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2015-20107, CVE-2020-10735, CVE-2021-28861,...

Rocky Linux 8 [CIQ] Security Update: python3-numpy / python3-numpy-debuginfo / python3-numpy-f2py (crlsa-2019_3704)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20193704 advisory. numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code execution CVE-2019-6446 Tenable has extracted the preceding...

sqli-xss-detection

How to run it Open a terminal in the project root: sqlixssdete...

Improper Check for Unusual or Exceptional Conditions

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the disaggregated serving endpoint /inference/v1/generate in...

PT-2026-99322

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description The software fails to enforce decoder prompt-length validation on the disaggregated serving endpoint '/inference/v1/generate'. When a request includes a 'features' multimodal payload, the system builds...

psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

GHSA-8Q6G-VJHF-JP8M psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

Summary PSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

CVE-2026-59991 psd-tools: Uncontrolled memory allocation in psd-tools composite/numpy via crafted PSD geometry

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite and PSDImage.numpy allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those value...