End of life: 6/22/2028, Latest version: 2.5.4
End of life: 12/21/2027, Latest version: 2.4.6
An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."