Vulnerabilities for scipy

First version without a known vulnerability: 1.10.0

Details

• PYSEC-2023-1142023-07-06

  ** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

  Fixed in: 1.8.0

• PYSEC-2023-1022023-07-05

  A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.

  Fixed in: 1.10.0

• GHSA-xp76-357g-9wqq2022-05-05

  SciPy creates insecure temporary directories

  Fixed in: 0.12.1, bd296e0336420b840fcd2faabb97084fd252a973