Executive brief
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Affected products
- PyPI scipy
Junglewise Threat Intelligence
CVE-2013-4251: PYSEC-2019-156 - The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
CVE-2013-4251 · Severity: low · CVSS 3.1 · Published 2019-11-04
Technologies: scipy (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2023-114 - ** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and dis
- PYSEC-2023-102 - A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.