{"action":"Upgrade admesh to 0.98.5 or later.","affected":[{"fixed":"0.98.5","introduced":"0"}],"component":"admesh","cve_ids":["CVE-2018-25033"],"ecosystem":"PyPI","epss":0.01067,"exploited":false,"fixed_versions":["0.98.5"],"ghsa_id":"GHSA-5jrq-582v-9767","id":"tcs_01M5KGGCDFABEKMEFA0XAZKCDN","modified_at":"2023-11-08T04:00:15.219347Z","published_at":"2022-05-08T06:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-182","https://github.com/admesh/admesh/issues/28","https://github.com/advisories/GHSA-5jrq-582v-9767"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-182","url":"https://osv.dev/vulnerability/PYSEC-2022-182"}],"summary":"ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a."}