The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
"https://github.com/pypa/advisory-database/blob/main/vulns/numpy/PYSEC-2017-1.yaml"