Skip to content

PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

Low severity GitHub Reviewed Published Feb 25, 2024 in alexlancaster/pypop • Updated Feb 26, 2024

Package

pip pypop-genomics (pip)

Affected versions

< 1.0.2

Patched versions

1.0.2

Description

Impact

Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.

Patches

The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:

pip install -U pypop-genomics

Workarounds

No. Upgrade to the latest package: 1.0.2.

References

N/A

References

@alexlancaster alexlancaster published to alexlancaster/pypop Feb 25, 2024
Published to the GitHub Advisory Database Feb 26, 2024
Reviewed Feb 26, 2024
Last updated Feb 26, 2024

Severity

Low

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-p4m5-32pr-2hqr

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.