{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2025-2152"],"ecosystem":"PyPI","epss":0.00526,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNXG253NHXJTCWEASHCKB","modified_at":"2026-05-21T15:00:20.766114807Z","published_at":"2025-03-10T14:15:26.543Z","references":["https://osv.dev/vulnerability/PYSEC-2025-159","https://vuldb.com/?id.299063","https://vuldb.com/?submit.510818","https://github.com/assimp/assimp/issues/6027","https://github.com/assimp/assimp/issues/6027#issue-2877629241","https://vuldb.com/?ctiid.299063"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-159","url":"https://osv.dev/vulnerability/PYSEC-2025-159"}],"summary":"A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporte"}