PT-2024-40388 · Pypi · Pypop

Published 2024-02-26 · Updated 2024-02-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PyPop versions prior to 1.0.2

Description Code scanning revealed a possible issue in C extensions for PyPop, involving incorrect function calls, such as missing arguments or wrongly typed arguments, and redundant null pointers.

Recommendations For versions prior to 1.0.2, upgrade your PyPop installation to the latest release (1.0.2) via pip install -U pypop-genomics.

Related Identifiers

GHSA-P4M5-32PR-2HQR

Affected Products

Pypop

References · 5

• https://osv.dev/vulnerability/GHSA-p4m5-32pr-2hqr · Vendor Advisory
• https://github.com/alexlancaster/pypop/commit/2e5c495dd7684f67f6682e80e324351039a28262 · Note
• https://github.com/alexlancaster/pypop/releases/tag/v1.0.2 · Note
• https://github.com/alexlancaster/pypop/security/advisories/GHSA-p4m5-32pr-2hqr · Note
• https://github.com/alexlancaster/pypop · Note