{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2025-3159"],"ecosystem":"PyPI","epss":0.00335,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPH2MG61YDMNHNV86XQE9","modified_at":"2026-07-13T07:15:41.077892520Z","published_at":"2025-04-03T14:15:46.983Z","references":["https://osv.dev/vulnerability/PYSEC-2025-263","https://vuldb.com/?id.303105","https://vuldb.com/?submit.542247","https://github.com/assimp/assimp/issues/6024","https://github.com/assimp/assimp/issues/6024#issue-2877382033","https://vuldb.com/?ctiid.303105","https://github.com/assimp/assimp/pull/6051","https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2025-263","url":"https://osv.dev/vulnerability/PYSEC-2025-263"}],"summary":"A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetL"}