PyPI/materialx CVE-2025-53009: high 7.5, EPSS 0.66%
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Action: Upgrade materialx to 1.39.3 or later.
pip install materialx==1.39.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.39.2 | 1.39.3 | - |
Fixed versions
| 1.39.3 |
Sources
- osv: PYSEC-2026-1609
- nvd: CVE-2025-53009
- https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-wx6g-fm6f-w822
- https://github.com/AcademySoftwareFoundation/MaterialX/issues/2504
- https://github.com/AcademySoftwareFoundation/MaterialX/pull/2505
- https://github.com/AcademySoftwareFoundation/MaterialX/commit/91ffea0de7bfe7bcd0c399b07f04fc48227055ff
- https://github.com/AcademySoftwareFoundation/MaterialX
- https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
- https://github.com/ShielderSec/poc/tree/main/CVE-2025-53009
- https://pypi.org/project/materialx
- https://github.com/advisories/GHSA-wx6g-fm6f-w822
CVE-2025-53009 · published · modified · JSON