{"id":"GHSA-p4m5-32pr-2hqr","aliases":[],"status":"published","title":"PyPop C extensions possible vulnerability: missing arguments and redundant null pointers","description":"### Impact\nCode scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.\n\n### Patches\nThe problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:\n\n```\npip install -U pypop-genomics\n```\n\n### Workarounds\nNo. Upgrade to the latest package: 1.0.2.\n\n### References\nN/A","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-02-26T20:04:19Z","modified":"2024-12-04T05:40:52Z","fixes":[{"ecosystem":"PyPI","package":"pypop-genomics","fixed_in":["1.0.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pypop-genomics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pypop-genomics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}],"versions":["1.0.0","1.0.0a38","1.0.0a39","1.0.0a40","1.0.0b1","1.0.0b2","1.0.0b3","1.0.0b4","1.0.0b5","1.0.0b6","1.0.0b7","1.0.0b8","1.0.0rc1","1.0.0rc2","1.0.1","1.0.1rc1","1.0.1rc2","1.0.1rc3"]}],"references":[{"url":"https://github.com/alexlancaster/pypop/security/advisories/GHSA-p4m5-32pr-2hqr","tags":["web"]},{"url":"https://github.com/alexlancaster/pypop/commit/2e5c495dd7684f67f6682e80e324351039a28262","tags":["web"]},{"url":"https://github.com/alexlancaster/pypop/releases/tag/v1.0.2","tags":["web"]},{"url":"https://github.com/advisories/GHSA-p4m5-32pr-2hqr"},{"url":"https://github.com/alexlancaster/pypop","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-p4m5-32pr-2hqr","title":"PyPop C extensions possible vulnerability: missing arguments and redundant null pointers","description":"### Impact\nCode scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.\n\n### Patches\nThe problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:\n\n```\npip install -U pypop-genomics\n```\n\n### Workarounds\nNo. Upgrade to the latest package: 1.0.2.\n\n### References\nN/A\n","status":"published","published":"2024-02-26T20:04:19Z","modified":"2024-02-26T20:04:27Z","updated_at":"2026-11-02T14:37:38.935144Z"}],"osv":[{"id":"GHSA-p4m5-32pr-2hqr","title":"PyPop C extensions possible vulnerability: missing arguments and redundant null pointers","description":"### Impact\nCode scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.\n\n### Patches\nThe problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:\n\n```\npip install -U pypop-genomics\n```\n\n### Workarounds\nNo. Upgrade to the latest package: 1.0.2.\n\n### References\nN/A\n","status":"published","published":"2024-02-26T20:04:19Z","modified":"2024-12-04T05:40:52.5056Z","updated_at":"2026-11-02T15:46:52.534897Z"}]}}