CLSA-2025-1755216832 TuxCare security update for numpy (1 CVE)

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post1+tuxcare...

PT-2026-118517

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.16.0.post1+tuxcare...

PT-2026-118518

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post1+tuxcare...

PT-2026-118520

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.15.4.post2+tuxcare...

PT-2026-118526

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.16.0.post2+tuxcare...

PT-2026-75015

TuxCare rebuilt numpy to address 1 CVE. Fixed in 1.21.0.post1+tuxcare...

OPENSUSE-SU-2026:11371-1 python313-numpy-2.4.6-1.1 on GA media

These are all security issues fixed in the python313-numpy-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in pandas-numpy (PyPI)

Source: ossf-package-analysis ad64cd7fe8db5e273a5e994ca67fcc44546298765caf11ec2edcd0d587481434 The OpenSSF Package Analysis project identified 'pandas-numpy' @ 8.19.3 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in os-numpy (PyPI)

Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

Malicious code in numpy-req (PyPI)

Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in numpy-selenium (PyPI)

Source: ossf-package-analysis dc92a371c845859241fd20b897b00c4b6c39fcc8ec83dfe9fbb0146c36d267c5 The OpenSSF Package Analysis project identified 'numpy-selenium' @ 5.20.19 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in numpy-lib (PyPI)

Source: kam193 a1e0009e8bfad1a403632094f43e661b328b40a6f518db00b890712789e39734 Package installs persistent malware acting as Rat, with the focus of stealing data and modifying copied cryptowallet addresses. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in beautifulsoup-numpy (PyPI)

Source: ossf-package-analysis 199bccf9ed40ab3dcd67c494f1b1b52cd3fa78beed3bc25e851cb0f14db9b60b The OpenSSF Package Analysis project identified 'beautifulsoup-numpy' @ 10.13.10 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

[SECURITY] Fedora 44 Update: python-orjson-3.11.9-3.fc44

orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...

[SECURITY] Fedora 43 Update: python-orjson-3.11.9-3.fc43

orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...

EUVD-2026-18522

vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models...

cssfinder (>=0.3.0, <=0.8.0), cssfinder-backend-numpy (>=0.1.1, <=0.5.0) +3 more potentially affected by CVE-2026-49452 via weasyprint (58.1.0)

weasyprint PYPI version 58.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cssfinder =0.3.0, =0.1.1, =0.2.0, =0.3.0 - wh-m2p 0.0.1a0 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

Seg fault in `ndarray_tensor_bridge` due to zero and large inputs

ImpactIf a numpy array is created with a shape such that one element is zero and the others sum to a large number, an error will be raised. E.g. the following raises an error:pythonnp.ones0, 231, 231An example of a proof of concept:pythonimport numpy as npimport tensorflow as tfinputval =...

PT-2026-59825

Impact If a numpy array is created with a shape such that one element is zero and the others sum to a large number, an error will be raised. E.g. the following raises an error: python np.ones0, 231, 231 An example of a proof of concept: python import numpy as np import tensorflow as tf input val ...

PT-2026-59959

Impact If a numpy array is created with a shape such that one element is zero and the others sum to a large number, an error will be raised. E.g. the following raises an error: python np.ones0, 231, 231 An example of a proof of concept: python import numpy as np import tensorflow as tf input val ...