mass-ts
mass-ts copied to clipboard
CVE-2021-34141 (High) detected in numpy-1.16.6-cp27-cp27mu-manylinux1_x86_64.whl
CVE-2021-34141 - High Severity Vulnerability
Vulnerable Library - numpy-1.16.6-cp27-cp27mu-manylinux1_x86_64.whl
NumPy is the fundamental package for array computing with Python.
Library home page: https://files.pythonhosted.org/packages/3a/5f/47e578b3ae79e2624e205445ab77a1848acdaa2929a00eeef6b16eaaeb20/numpy-1.16.6-cp27-cp27mu-manylinux1_x86_64.whl
Path to dependency file: mass-ts/requirements.txt
Path to vulnerable library: mass-ts/requirements.txt,mass-ts
Dependency Hierarchy:
- :x: numpy-1.16.6-cp27-cp27mu-manylinux1_x86_64.whl (Vulnerable Library)
Vulnerability Details
Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
Publish Date: 2021-12-17
URL: CVE-2021-34141
CVSS 3 Score Details (9.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2021-34141
Release Date: 2021-12-17
Fix Resolution: numpy - 1.22.0rc1
Step up your Open Source Security Game with WhiteSource here