See how scipy compares to other vendors in security performance
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
DISPUTED A use-after-free issue was discovered in PyFindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information.
Original Description
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in PyFindObjects() function.
DISPUTED A use-after-free issue was discovered in PyFindObjects() function in SciPy versions prior to 1.8.0.
https://github.com/scipy/scipy/issues/14713 http://www.square16.org/achievement/cve-2023-29824/ https://github.com/scipy/scipy/pull/15013 https://github.com/scipy/scipy/issues/14713#issuecomment-1629468565