{"id":"GHSA-p4m5-32pr-2hqr","summary":"PyPop C extensions possible vulnerability: missing arguments and redundant null pointers","details":"### Impact\nCode scanning revealed possible vulnerability in C extensions for PyPop: incorrect function calls (missing arguments or wrongly typed arguments) and redundant null pointers.\n\n### Patches\nThe problem has been patched and fixed in the latest release of PyPop: 1.0.2. Please upgrade your PyPop installation via:\n\n```\npip install -U pypop-genomics\n```\n\n### Workarounds\nNo. Upgrade to the latest package: 1.0.2.\n\n### References\nN/A\n","modified":"2024-12-04T05:40:52.505600Z","published":"2024-02-26T20:04:19Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2024-02-26T20:04:19Z","nvd_published_at":null,"cwe_ids":[],"severity":"LOW"},"references":[{"type":"WEB","url":"https://github.com/alexlancaster/pypop/security/advisories/GHSA-p4m5-32pr-2hqr"},{"type":"WEB","url":"https://github.com/alexlancaster/pypop/commit/2e5c495dd7684f67f6682e80e324351039a28262"},{"type":"PACKAGE","url":"https://github.com/alexlancaster/pypop"},{"type":"WEB","url":"https://github.com/alexlancaster/pypop/releases/tag/v1.0.2"}],"affected":[{"package":{"name":"pypop-genomics","ecosystem":"PyPI","purl":"pkg:pypi/pypop-genomics"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2"}]}],"versions":["1.0.0","1.0.0a38","1.0.0a39","1.0.0a40","1.0.0b1","1.0.0b2","1.0.0b3","1.0.0b4","1.0.0b5","1.0.0b6","1.0.0b7","1.0.0b8","1.0.0rc1","1.0.0rc2","1.0.1","1.0.1rc1","1.0.1rc2","1.0.1rc3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-p4m5-32pr-2hqr/GHSA-p4m5-32pr-2hqr.json"}}],"schema_version":"1.9.0"}