Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| cvxopt(PyPI) | 0 | 1.2.7 | N/A |
CVSS Metrics
