GitHub Advisoryadvisory · PyPI

GHSA-p4m5-32pr-2hqr PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

LOW Published 2024-02-26 Modified 2024-02-26 Official page ↗

Ecosystem: PyPI
Packages: pypop-genomics
Severity: Low
Reviewed: 2024-02-26

Affected packages

• PyPI pypop-genomics: < 1.0.2 → fixed in 1.0.2

Description

Impact Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers. Patches The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via: ``` pip install -U pypop-genomics ``` Workarounds No. Upgrade to the latest package: 1.0.2. References N/A

References

https://github.com/alexlancaster/pypop/security/advisories/GHSA-p4m5-32pr-2hqr web
https://github.com/alexlancaster/pypop/commit/2e5c495dd7684f67f6682e80e324351039a28262 web
https://github.com/alexlancaster/pypop package
https://github.com/alexlancaster/pypop/releases/tag/v1.0.2 web