[{"CVE":"CVE-2019-6446","severity":"moderate","public_date":"2019-01-16T00:00:00Z","advisories":["RHSA-2019:3335","RHSA-2019:3704"],"bugzilla":"1667950","bugzilla_description":"CVE-2019-6446 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-358->CWE-20","affected_packages":["python27:2.7-8010020190903182548.51c94b97","numpy-1:1.14.3-9.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6446.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2017-12852","severity":"low","public_date":"2017-08-15T00:00:00Z","advisories":[],"bugzilla":"1483686","bugzilla_description":"CVE-2017-12852 numpy: Missing input validation on empty list or ndarray in numpy.pad function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12852.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"4.0"},{"CVE":"CVE-2014-1858","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1858.json"},{"CVE":"CVE-2014-1859","severity":"low","public_date":"2014-02-05T00:00:00Z","advisories":[],"bugzilla":"1062009","bugzilla_description":"CVE-2014-1858 CVE-2014-1859 numpy: f2py insecure temporary file use","cvss_score":2.1,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","CWE":"(CWE-377|CWE-367)","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1859.json"}]