GHSA-p4m5-32pr-2hqr PyPop C extensions possible vulnerability: missing arguments and redundant null pointers
Code scanning identified potential issues in PyPop C extensions involving incorrect function calls and redundant null pointers, requiring an upgrade to the latest version.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-p4m5-32pr-2hqr?
GHSA-p4m5-32pr-2hqr is a vulnerability in pypop-genomics, published on 26 Feb 2024.
Official description
Impact
Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.
Patches
The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:
pip install -U pypop-genomics
Workarounds
No. Upgrade to the latest package: 1.0.2.
References
N/A
Which versions are affected by GHSA-p4m5-32pr-2hqr?
2 open source packages ship an affected version, including pypop-genomics.
| Package | Affected | Fixed in |
|---|---|---|
pypop-genomics PyPI | All versions | 1.0.2 |
pypop-genomics PyPI | All versions | 1.0.2 |
How do I fix GHSA-p4m5-32pr-2hqr?
Upgrade pypop-genomics to 1.0.2 or later.
Is GHSA-p4m5-32pr-2hqr being exploited?
There is no known exploitation of GHSA-p4m5-32pr-2hqr in the wild and no public exploit code.