Security Alert - Package: numpy; Severity: MODERATE

[phenggeler]

    Affected package: numpy
    Ecosystem: PIP
    Affected version range: >= 1.9.0, < 1.21

    Summary: Buffer Overflow in NumPy
    Description: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.
    identifiers: [{'type': 'GHSA', 'value': 'GHSA-6p56-wp2h-9hxr'}, {'type': 'CVE', 'value': 'CVE-2021-33430'}]

    Fixed Version: 1.21
    Created Date = January 25, 2022

    

    ---