CVE-2021-34141: Numpy

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

Affected products

• Numpy Numpy: before 1.22.0 (fixed in 1.22.0)
• Oracle Communications Cloud Native Core Policy: version 22.1.3 only

Published 2021-12-17. Last modified 2026-10-08.