GHSA-p4m5-32pr-2hqr: PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

February 26, 2024

Impact

Code scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.

Patches

The problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:

pip install -U pypop-genomics

Workarounds

No. Upgrade to the latest package: 1.0.2.

References

N/A

References

github.com/advisories/GHSA-p4m5-32pr-2hqr
github.com/alexlancaster/pypop
github.com/alexlancaster/pypop/commit/2e5c495dd7684f67f6682e80e324351039a28262
github.com/alexlancaster/pypop/releases/tag/v1.0.2
github.com/alexlancaster/pypop/security/advisories/GHSA-p4m5-32pr-2hqr

Code Behaviors & Features

Detect and mitigate GHSA-p4m5-32pr-2hqr with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →