{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2025-2757"],"ecosystem":"PyPI","epss":0.00537,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNZ87K9A62NXFKT0SD0YZ","modified_at":"2026-05-21T15:00:17.646998993Z","published_at":"2025-03-25T10:15:16.887Z","references":["https://osv.dev/vulnerability/PYSEC-2025-168","https://vuldb.com/?id.300862","https://vuldb.com/?submit.517817","https://github.com/assimp/assimp/issues/6019","https://github.com/assimp/assimp/issues/6019#issue-2877376386","https://vuldb.com/?ctiid.300862"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-168","url":"https://osv.dev/vulnerability/PYSEC-2025-168"}],"summary":"A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Pa"}