# numpy 2.5.0

The fundamental package for scientific computing with Python.

Snapshot of gominimal/pkgs commit `cd4b09dd2f492c47fba70eb1b8a8c724dabdc7e9` (pushed 2026-07-10T23:16:55.000Z).

## Install

```sh
min add numpy
```

## Direct advisories

| ID | Severity | CVSS | Fix status | Fixed version | Summary |
| --- | --- | --- | --- | --- | --- |
| CVE-2014-1858 | MEDIUM | 5.5 | unknown_fix | 0bb46c1448b0d3f5453d5182a17ea7ac5854ee15 | __init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file. |
| CVE-2014-1859 | MEDIUM | 5.5 | unknown_fix | 0bb46c1448b0d3f5453d5182a17ea7ac5854ee15 | (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file. |

## Transitive advisories

26 advisories inherited through runtime dependencies:

- CVE-2025-15366 (MEDIUM) via python
- CVE-2026-0864 (MEDIUM) via python
- CVE-2026-11940 (HIGH) via python
- CVE-2026-11972 (HIGH) via python
- CVE-2026-12003 (MEDIUM) via python
- CVE-2026-15308 (HIGH) via python
- CVE-2026-4360 (LOW) via python
- CVE-2026-45186 (LOW) via python → expat
- CVE-2026-50219 (MEDIUM) via python → expat
- CVE-2026-56131 (MEDIUM) via python → expat
- CVE-2026-56132 (MEDIUM) via python → expat
- CVE-2026-56403 (MEDIUM) via python → expat
- CVE-2026-56404 (MEDIUM) via python → expat
- CVE-2026-56405 (MEDIUM) via python → expat
- CVE-2026-56406 (MEDIUM) via python → expat
- CVE-2026-56407 (MEDIUM) via python → expat
- CVE-2026-56408 (MEDIUM) via python → expat
- CVE-2026-56409 (MEDIUM) via python → expat
- CVE-2026-56410 (MEDIUM) via python → expat
- CVE-2026-56411 (MEDIUM) via python → expat
- CVE-2026-56412 (MEDIUM) via python → expat
- CVE-2026-4046 (HIGH) via python → glibc
- CVE-2026-4437 (HIGH) via python → glibc
- CVE-2026-4438 (MEDIUM) via python → glibc
- CVE-2026-5450 (CRITICAL) via python → glibc
- CVE-2026-5928 (HIGH) via python → glibc

## Dependencies

- Build (4): base, cython, pkgconf, meson-python
- Runtime (2): python, openblas

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 66 | mid |
| advisories | 10 | low |
| quality | 70 | mid |
| maintenance | 95 | good |
| licence | 90 | good |

## Links

- Homepage: https://numpy.org
- Package page (HTML): https://minimal.dev/pkgs/numpy
- JSON API (floats latest): https://minimal.dev/api/pkgs/numpy.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/numpy/sbom.json