PyPI/usd-core: medium

OpenUSD File Parsing Use-After-Free Remote Code Execution Vulnerability

Action: Upgrade usd-core to 25.11 or later.

pip install usd-core==25.11

Affected

Fixed versions

Sources

• osv: GHSA-grjp-54v3-c442
• https://github.com/PixarAnimationStudios/OpenUSD/security/advisories/GHSA-grjp-54v3-c442
• https://github.com/PixarAnimationStudios/OpenUSD/commit/b9530922b6a8ea72cd43661226b693fff8abbe4c
• https://github.com/PixarAnimationStudios/OpenUSD

published 2025-10-29T22:13:03Z · modified 2025-10-29T22:31:30.040308Z · JSON