-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| numpy | pip | < 1.13.3 | 1.13.3 |
The vulnerability description explicitly names numpy.pad as the affected function. The GitHub issue (#9560) and CVE both demonstrate that passing empty arrays to pad() with mode='reflect' triggers the infinite loop. The fix in NumPy 1.13.3 (PR #9742) specifically addresses input validation in this function. The file path is derived from NumPy's standard source structure where array padding logic resides in arraypad.py.