{"schema_version":"1.7.3","id":"GHSA-9jx5-6pgf-crrp","published":"2023-07-05T18:30:44Z","modified":"2026-06-10T17:11:23.230726715Z","withdrawn":"2024-05-14T20:15:44Z","aliases":["CVE-2023-25399","PYSEC-2023-102"],"summary":"Withdrawn: scipy memory leak vulnerability","details":"## Withdrawn Advisory\n\nThis advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328) for more information.\n\n## Original Description\n\nA refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in `Py_FindObjects()` function.","affected":[{"package":{"name":"scipy","ecosystem":"PyPI","purl":"pkg:pypi/scipy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.0"}]}],"versions":["0.10.0","0.10.1","0.11.0","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.16.1","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.4.4","0.5.2","0.6.0","0.7.0","0.7.2","0.8.0","0.9.0","1.0.0","1.0.1","1.1.0","1.10.0rc1","1.10.0rc2","1.2.0","1.2.1","1.2.2","1.2.3","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.8.0","1.8.0rc1","1.8.0rc2","1.8.0rc3","1.8.0rc4","1.8.1","1.9.0","1.9.0rc1","1.9.0rc2","1.9.0rc3","1.9.1","1.9.2","1.9.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-9jx5-6pgf-crrp/GHSA-9jx5-6pgf-crrp.json"}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25399"},{"type":"WEB","url":"https://github.com/scipy/scipy/issues/16235"},{"type":"WEB","url":"https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328"},{"type":"WEB","url":"https://github.com/scipy/scipy/pull/16397"},{"type":"WEB","url":"https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/scipy/PYSEC-2023-102.yaml"},{"type":"PACKAGE","url":"https://github.com/scipy/scipy"},{"type":"WEB","url":"http://www.square16.org/achievement/cve-2023-25399"}],"database_specific":{"cwe_ids":["CWE-400"],"github_reviewed":true,"github_reviewed_at":"2023-07-06T21:01:56Z","nvd_published_at":"2023-07-05T17:15:09Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}