PYSEC-2023-102
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-25399
- Alias
- GHSA-9jx5-6pgf-crrp
Description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · scipy | introduced 0, fixed 1.10.0 |
Références
- https://github.com/scipy/scipy/issues/16235 EVIDENCE
- https://github.com/scipy/scipy/issues/16235 REPORT
- https://github.com/scipy/scipy/issues/16235 FIX
- https://github.com/scipy/scipy/issues/16235 ADVISORY
- https://github.com/scipy/scipy/pull/16397 FIX
- http://www.square16.org/achievement/cve-2023-25399/ WEB
- https://github.com/advisories/GHSA-9jx5-6pgf-crrp ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |