{"schemaVersion":3,"id":"CVE-2021-41495","aliases":["SUSE-SU-2022:2645-1","SUSE-SU-2022:2646-1","SUSE-SU-2022:2793-1","SUSE-SU-2025:0424-1","GHSA-5545-2q6w-2gh6","PYSEC-2021-856","RHSA-2022:8852","RHSA-2022:8861","UBUNTU-CVE-2021-41495","DEBIAN-CVE-2021-41495"],"status":"published","duplicateOf":null,"title":null,"description":"Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place","dates":{"published":"2021-12-17T19:25:19.000Z","modified":"2024-08-04T03:15:28.284Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":4.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":4.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":3.5,"severity":"low","vector":"AV:N/AC:M/Au:S/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01241,"percentile":0.68921,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.08699999999999992,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.01154},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01241,"percentile":0.68921}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01154,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01241,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01241,"percentile":0.68921}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_NUMPY_NUMPY","name":"Numpy","source":"github","url":"https://github.com/numpy/numpy/issues/9560#issuecomment-322395292","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-476","name":"NULL Pointer Dereference","description":"The product dereferences a pointer that it expects to be valid but is NULL.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/476.html"}],"affected":[{"vendor":"debian","product":"numpy","name":"numpy","label":"numpy","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/numpy","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"numpy","name":"numpy","label":"numpy","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/numpy","purlType":"deb","versions":[{"text":"< 1:1.17.4-5ubuntu3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.21.5-1ubuntu22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.4-5ubuntu3.1 | < 1:1.21.5-1ubuntu22.04.1","eol":null,"hubHref":null},{"vendor":"numpy","product":"numpy","name":"numpy","label":"numpy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.19.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.19.0","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"numpy","label":"NumPy","category":"framework"}},"hubHref":"/vendor/numpy/numpy"},{"vendor":"PyPI","product":"numpy","name":"numpy","label":"numpy","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/numpy","purlType":"pypi","versions":[{"text":"< 1.19","noFixRecorded":false,"fixedIn":null},{"text":"< 1.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.19 | < 1.19.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.4","name":"python-numpy_1_17_3-gnu-hpc","label":"python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.23.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.23.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.6","name":"python-numpy_1_17_3-gnu-hpc","label":"python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-numpy_1_17_3-gnu-hpc&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.31.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-numpy&distro=openSUSE Leap 15.4","name":"python-numpy","label":"python-numpy&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-numpy&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.23.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.23.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python3-numpy&distro=openSUSE Leap 15.6","name":"python3-numpy","label":"python3-numpy&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python3-numpy&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.31.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"numpy","name":"numpy","label":"numpy","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/numpy","purlType":"rpm","versions":[{"text":"< 1:1.17.0-11.el8ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.0-11.el8ost","eol":null,"hubHref":null},{"vendor":"redhat","product":"numpy-debugsource","name":"numpy-debugsource","label":"numpy-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/numpy-debugsource","purlType":"rpm","versions":[{"text":"< 1:1.17.0-11.el8ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.0-11.el8ost","eol":null,"hubHref":null},{"vendor":"redhat","product":"python3-numpy","name":"python3-numpy","label":"python3-numpy","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python3-numpy","purlType":"rpm","versions":[{"text":"< 1:1.17.0-11.el8ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.0-11.el8ost","eol":null,"hubHref":null},{"vendor":"redhat","product":"python3-numpy-debuginfo","name":"python3-numpy-debuginfo","label":"python3-numpy-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python3-numpy-debuginfo","purlType":"rpm","versions":[{"text":"< 1:1.17.0-11.el8ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.0-11.el8ost","eol":null,"hubHref":null},{"vendor":"redhat","product":"python3-numpy-f2py","name":"python3-numpy-f2py","label":"python3-numpy-f2py","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python3-numpy-f2py","purlType":"rpm","versions":[{"text":"< 1:1.17.0-11.el8ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.17.0-11.el8ost","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy_1_13_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 12","name":"python-numpy_1_13_3-gnu-hpc","label":"python-numpy_1_13_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy_1_13_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 12","purlType":"rpm","versions":[{"text":"< 1.13.3-4.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.3-4.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4","name":"python-numpy_1_17_3-gnu-hpc","label":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP4","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.23.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.23.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP6","name":"python-numpy_1_17_3-gnu-hpc","label":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for HPC 15 SP6","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","name":"python-numpy_1_17_3-gnu-hpc","label":"python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy_1_17_3-gnu-hpc&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"python-numpy","label":"python-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.23.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.23.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy&distro=SUSE Linux Enterprise Server 12 SP5","name":"python-numpy","label":"python-numpy&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0-5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"python-numpy","label":"python-numpy&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0-5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-numpy&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"python-numpy","label":"python-numpy&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-numpy&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0-5.14.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-5.14.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python3-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","name":"python3-numpy","label":"python3-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python3-numpy&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","purlType":"rpm","versions":[{"text":"< 1.17.3-150400.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.3-150400.31.1","eol":null,"hubHref":null}],"affectedCount":22,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/numpy/numpy/issues/19038","label":"github.com/numpy/numpy/issues/19038","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"www.oracle.com/security-alerts/cpujul2022.html","hostname":"www.oracle.com","tags":["WEB","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222645-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222645-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1193911","label":"bugzilla.suse.com/1193911","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41495","label":"www.suse.com/security/cve/CVE-2021-41495","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222646-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222646-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222793-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222793-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250424-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-20250424-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1236787","label":"bugzilla.suse.com/1236787","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41495","label":"nvd.nist.gov/vuln/detail/CVE-2021-41495","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/advisories/GHSA-5545-2q6w-2gh6","label":"github.com/advisories/GHSA-5545-2q6w-2gh6","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/numpy/numpy","label":"github.com/numpy/numpy","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2021-856.yaml","label":"github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2021-856.yaml","hostname":"github.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8852","label":"access.redhat.com/errata/RHSA-2022:8852","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035037","label":"bugzilla.redhat.com/show_bug.cgi?id=2035037","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8852.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8852.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41495","label":"access.redhat.com/security/cve/CVE-2021-41495","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41495","label":"www.cve.org/CVERecord?id=CVE-2021-41495","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8861","label":"access.redhat.com/errata/RHSA-2022:8861","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8861.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8861.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41495","label":"ubuntu.com/security/CVE-2021-41495","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://github.com/numpy/numpy/pull/20984","label":"github.com/numpy/numpy/pull/20984","hostname":"github.com","tags":["REPORT"]},{"url":"https://github.com/numpy/numpy/pull/20960","label":"github.com/numpy/numpy/pull/20960","hostname":"github.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5763-1","label":"ubuntu.com/security/notices/USN-5763-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41495","label":"security-tracker.debian.org/tracker/CVE-2021-41495","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2022:1064-1","OPENSUSE-SU-2024:13220-1","OPENSUSE-SU-2024:14311-1","OPENSUSE-SU-2026:11371-1","SUSE-SU-2022:1064-1","SUSE-SU-2022:1064-2","SUSE-SU-2022:2441-1","USN-5763-1"],"duplicates":[],"related":["OPENSUSE-SU-2022:1064-1","OPENSUSE-SU-2024:13220-1","OPENSUSE-SU-2024:14311-1","OPENSUSE-SU-2026:11371-1","SUSE-SU-2022:1064-1","SUSE-SU-2022:1064-2","SUSE-SU-2022:2441-1","USN-5763-1"]},"timeline":[{"kind":"published","date":"2021-12-17T19:25:19.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T03:15:28.284Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:49:54.664Z","stale":false,"partial":false}}