| Package | Affected versions | Patched versions |
|---|---|---|
| numpy | < 1.8.1 | 1.8.1 |
| numpy | = 1.8.1≤ 1.8.0 |
(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free