Approved changes feed: RSS · Atom

cpe:2.3:a:scipy:scipy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorScipy (1f6a9c8b-85eb-5c2e-aa7c-cbc84a300299)
ProductScipy (afb924f9-9af2-5b0e-83ff-9da4a91a98ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/scipy purl2cpe 2026-06-01 10:16:27.405763
pkg:deb/ubuntu/scipy purl2cpe 2026-06-01 10:16:27.405765
pkg:github/scipy/scipy purl2cpe 2026-06-01 10:16:27.405767
pkg:gitlab/redhat/scipy purl2cpe 2026-06-01 10:16:27.405769
pkg:pypi/scipy purl2cpe 2026-06-01 10:16:27.405770
pkg:rpm/centos/scipy purl2cpe 2026-06-01 10:16:27.405772
pkg:rpm/fedora/scipy purl2cpe 2026-06-01 10:16:27.405773
pkg:rpm/opensuse/python-scipy purl2cpe 2026-06-01 10:16:27.405775
pkg:sourceforge/scipy.mirror purl2cpe 2026-06-01 10:16:27.405776

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29824 vulnerable 2026-06-08 06:02:40.704570 Details available
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-08-02T14:14:40.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25399 vulnerable 2026-06-08 05:56:08.773520 Details available
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-08-02T11:18:36.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4251 vulnerable 2026-06-08 05:04:34.942963 Details available
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Published: 2019-11-04T19:21:42.000Z
Updated: 2024-08-06T16:38:01.948Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.