PyPI/usd-core: critical 9.4
Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution
Action: Upgrade usd-core to 25.8 or later.
pip install usd-core==25.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.8 | - |
Fixed versions
| 25.8 |
Sources
- osv: GHSA-58p5-r2f6-g2cj
- https://github.com/PixarAnimationStudios/OpenUSD/security/advisories/GHSA-58p5-r2f6-g2cj
- https://github.com/PixarAnimationStudios/OpenUSD/commit/0d74f31fe64310791e274e587c9926335e9db9db
- https://github.com/PixarAnimationStudios/OpenUSD
published · modified · JSON