Incorrect Comparison in NumPy

MEDIUM 5.3CVE-2021-34141 · GHSA-fpfv-jqm9-f5jm · PYSEC-2021-855 · Published 17/12/2021 · updated 08/10/2026

Package	Affected versions	Patched versions
numpy PyPI	`≥ 1.9.0, < 1.10.0< 1.22`	`1.10.01.22`
numpy numpy	`< 1.22.0`	`1.22.0`
communications cloud native core policy oracle	`= 22.1.3`	No fix yet

Description

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

NVD description

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

References

nvd.nist.gov/vuln/detail/CVE-2021-34141 · ADVISORY
numpy/numpy · WEB
numpy/numpy · WEB
GitHub Advisory GHSA-fpfv-jqm9-f5jm · ADVISORY
numpy/numpy · PACKAGE
pypa/advisory-database · WEB
oracle.com/security-alerts/cpujul2022.html · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free