Skip to content
OpenAdvisories

Package · Ubuntu

pymatgen

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.4
    CVE-2024-23346 Public exploit

    pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

    Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.…

    materialsproject pymatgen pymatgen pymatgen Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2022-42964

    Exponential ReDoS in pymatgen leads to denial of service

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method

    pymatgen pymatgen pymatgen pymatgen Debian Ubuntu PyPI