Most recent entries from all

bdu:2024-07432

2026-10-04T09:50:32.808997+00:00

bdu:2024-07432

BREW-scipy-CVE-2023-29824

2026-10-04T09:50:32.809039+00:00

Affected: Homebrew: scipy

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

EUVD-2026-8455

2026-10-04T09:50:32.809073+00:00

EUVD-2026-8455

fkie_cve-2023-29824

2026-10-04T09:50:32.809087+00:00

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

Withdrawn: GHSA-jrfm-2h82-xg28 — Withdrawn: Use after free in SciPy

2026-10-04T09:50:32.809109+00:00

Withdrawn by the publisher.

Affected: PyPI: scipy

## Withdrawn Advisory

This advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/14713#issuecomment-1629468565) for more information.

## Original Description

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.

gsd-2023-29824

2026-10-04T09:50:32.809134+00:00

gsd-2023-29824

PYSEC-2023-114

2026-10-04T09:50:32.809146+00:00

Affected: PyPI: scipy

** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

RHSA-2023:5009 — Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update

2026-10-04T09:50:32.809164+00:00

golang: net/http: handle server errors after sending GOAWAY kube-apiserver: Bypassing policies imposed by the ImagePolicyWebhook admission plugin kube-apiserver: Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin openshift: OCP & FIPS mode ovn: service monitor MAC flow is not rate limited golang.org/x/net/html: Cross site scripting golang: crypto/tls: slow verification of certificate chains containing large RSA keys scipy: use-after-free in Py_FindObjects() function goproxy: Denial of service (DoS) via unspecified vectors. golang: html/template: improper handling of HTML-like comments within script contexts golang: html/template: improper handling of special tags within script contexts golang: crypto/tls: panic when processing post-handshake message on QUIC connections golang: crypto/tls: lack of a limit on buffered post-handshake golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

SUSE-SU-2023:2970-1 — Security update for python-scipy

2026-10-04T09:50:32.809212+00:00

Security update for python-scipy

Withdrawn: UBUNTU-CVE-2023-29824

2026-10-04T09:50:32.809230+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:20.04:LTS: scipy

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.

WID-SEC-W-2024-0423 — IBM Business Automation Workflow: Mehrere Schwachstellen

2026-10-04T09:50:32.809248+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.