VULNERABILITY INTELLIGENCE

CVE-2021-34141

CVSS score5.3 MEDIUM

EPSS probability1.68%

CISA KEVNot currently listed

Published2021-12-17

Last modified2026-10-08

Description

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."