Juliantaylor

**Name of the Vulnerable Software and Affected Versions** NumPy versions prior to 1.8.1 **Description** The issue allows local users to write to arbitrary files via a symlink attack on a temporary file created by ` init .py` in f2py. **Recommendations** For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** NumPy versions prior to 1.8.1 **Description** The issue allows local users to write to arbitrary files via a symlink attack on a temporary file. This is possible due to vulnerabilities in certain files, including core/tests/test memmap.py, core/tests/test multiarray.py, f2py/f2py2e.py, and lib/tests/test io.py. **Recommendations** For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.