Approved changes feed: RSS · Atom

cpe:2.3:a:scipy:scipy:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorScipy (1f6a9c8b-85eb-5c2e-aa7c-cbc84a300299)
ProductScipy (afb924f9-9af2-5b0e-83ff-9da4a91a98ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/scipy purl2cpe 2026-06-01 10:16:27.405778
pkg:deb/ubuntu/scipy purl2cpe 2026-06-01 10:16:27.405780
pkg:github/scipy/scipy purl2cpe 2026-06-01 10:16:27.405781
pkg:gitlab/redhat/scipy purl2cpe 2026-06-01 10:16:27.405782
pkg:pypi/scipy purl2cpe 2026-06-01 10:16:27.405784
pkg:rpm/centos/scipy purl2cpe 2026-06-01 10:16:27.405786
pkg:rpm/fedora/scipy purl2cpe 2026-06-01 10:16:27.405787
pkg:rpm/opensuse/python-scipy purl2cpe 2026-06-01 10:16:27.405789
pkg:sourceforge/scipy.mirror purl2cpe 2026-06-01 10:16:27.405791

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29824 vulnerable 2026-06-08 06:02:40.703163 Details available
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-08-02T14:14:40.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25399 vulnerable 2026-06-08 05:56:08.772227 Details available
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.
Published: 2023-07-05T00:00:00.000Z
Updated: 2024-08-02T11:18:36.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.