Skip to content
OpenAdvisories
High DLA-3803-1 1 CVE

astropy - security update

Published Apr 30, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 astropy 3.1.2-2+deb10u1

Vulnerabilities 1

  • High 8.4
    CVE-2023-41334

    astropy vulnerable to RCE in TranformGraph().to_dot_graph function

    Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_grap…

    astropy astropy astropy astropy Debian Ubuntu PyPI