{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2025-3015"],"ecosystem":"PyPI","epss":0.00514,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPGR7KKVD2PB4247WBNJV","modified_at":"2026-07-13T07:15:40.866672808Z","published_at":"2025-03-31T21:15:53.757Z","references":["https://osv.dev/vulnerability/PYSEC-2025-261","https://vuldb.com/?id.302067","https://vuldb.com/?submit.524589","https://github.com/assimp/assimp/issues/6021","https://github.com/assimp/assimp/issues/6021#issue-2877378829","https://vuldb.com/?ctiid.302067","https://github.com/assimp/assimp/commit/7c705fde418d68cca4e8eff56be01b2617b0d6fe","https://github.com/assimp/assimp/pull/6045"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-261","url":"https://osv.dev/vulnerability/PYSEC-2025-261"}],"summary":"A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/"}