PyPI/pymatgen CVE-2022-42964: medium 5.9, EPSS 0.88%
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2022.9.21 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5jqp-885w-xj32
- https://nvd.nist.gov/vuln/detail/CVE-2022-42964
- https://github.com/materialsproject/pymatgen/issues/2755
- https://github.com/materialsproject/pymatgen
- https://research.jfrog.com/vulnerabilities/pymatgen-redos-xray-257184
CVE-2022-42964 · published · modified · JSON