{"action":"Upgrade openbabel to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"openbabel","cve_ids":["CVE-2025-10995"],"ecosystem":"PyPI","epss":0.00258,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-8j3x-m868-cpw8","id":"tcs_01M5KF8DDGCSHY621XW0163FRZ","modified_at":"2026-07-13T16:43:47.317304731Z","published_at":"2026-06-30T21:25:25Z","references":["https://osv.dev/vulnerability/GHSA-8j3x-m868-cpw8","https://github.com/openbabel/openbabel/security/advisories/GHSA-8j3x-m868-cpw8","https://nvd.nist.gov/vuln/detail/CVE-2025-10995","https://github.com/openbabel/openbabel/issues/2832","https://github.com/openbabel/openbabel/issues/2913","https://github.com/openbabel/openbabel/commit/d4621d417c167b50cc8ce7aa3a02557e5b2b81c5","https://github.com/openbabel/openbabel","https://github.com/user-attachments/files/22318572/poc.zip","https://vuldb.com/?ctiid.325923","https://vuldb.com/?id.325923","https://vuldb.com/?submit.654059"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-8j3x-m868-cpw8","url":"https://osv.dev/vulnerability/GHSA-8j3x-m868-cpw8"}],"summary":"Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow"}