oss-know / airflow-jobs

Apache License 2.0
6 stars 19 forks source link

fix CVE-2021-33430, up req numpy>=1.21 #8

Closed fivestarsky closed 2 years ago

fivestarsky commented 2 years ago

Remediation Upgrade numpy to version 1.21 or later. For example:

numpy>=1.21 Always verify the validity and compatibility of suggestions with your codebase.

CVE-2021-33430 Vulnerable versions: >= 1.9.0, < 1.21 Patched version: 1.21 A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service.