{"action":"Upgrade pymatgen to 2024.2.20 or later.","affected":[{"fixed":"2024.2.20","introduced":"0"}],"component":"pymatgen","cve_ids":["CVE-2024-23346"],"ecosystem":"PyPI","epss":0.03848,"exploited":false,"fixed_versions":["2024.2.20"],"ghsa_id":"GHSA-vgv8-5cpj-qj2f","id":"tcs_01M5KGMK89HKPTPARWYJ7Z43PZ","modified_at":"2026-06-10T17:14:18.077783090Z","published_at":"2024-02-21T17:15:09Z","references":["https://osv.dev/vulnerability/PYSEC-2024-226","https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f","https://www.vicarius.io/vsociety/posts/critical-security-flaw-in-pymatgen-library-cve-2024-23346","https://github.com/materialsproject/pymatgen/commit/c231cbd3d5147ee920a37b6ee9dd236b376bcf5a","https://github.com/materialsproject/pymatgen/blob/master/pymatgen/symmetry/settings.py#L97C1-L111C108","https://github.com/advisories/GHSA-vgv8-5cpj-qj2f"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-226","url":"https://osv.dev/vulnerability/PYSEC-2024-226"}],"summary":"Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` me"}