-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| scipy | pip | < 1.8.0 | 1.8.0 |
Miggo AIRoot Cause AnalysisThe commit e32fc23 shows removal of an extra Py_XDECREF(result) call in Py_FindObjects' error path. The original code had two decref calls (lines 924 and 931) when errors occurred. This matches the classic use-after-free pattern where an object's reference count is over-decremented, potentially freeing it prematurely. The vulnerability was explicitly addressed in PR #15013 and the CVE description specifically calls out Py_FindObjects as the affected function.
Ongoing coverage of React2Shell