{"action":"Upgrade ansys-geometry-core to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0.3.0"},{"fixed":"0.4.12","introduced":"0.4.0"}],"component":"ansys-geometry-core","cve_ids":["CVE-2024-29189"],"ecosystem":"PyPI","epss":0.00337,"exploited":false,"fixed_versions":["0.3.3","0.4.12"],"ghsa_id":"GHSA-38jr-29fh-w9vm","id":"tcs_01M5KGQQSWHN3ZXS2D3TC0Q5AW","modified_at":"2026-07-07T17:46:21.275187025Z","published_at":"2026-07-07T11:45:36.419888Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1127","https://github.com/ansys/pyansys-geometry/security/advisories/GHSA-38jr-29fh-w9vm","https://nvd.nist.gov/vuln/detail/CVE-2024-29189","https://github.com/ansys/pyansys-geometry/pull/1076","https://github.com/ansys/pyansys-geometry/pull/1077","https://github.com/ansys/pyansys-geometry/commit/902071701c4f3a8258cbaa46c28dc0a65442d1bc","https://github.com/ansys/pyansys-geometry/commit/f82346b9432b06532e84f3278125f5879b4e9f3f","https://bandit.readthedocs.io/en/1.7.8/plugins/b602_subprocess_popen_with_shell_equals_true.html","https://github.com/ansys/pyansys-geometry","https://github.com/ansys/pyansys-geometry/blob/52cba1737a8a7812e5430099f715fa2160ec007b/src/ansys/geometry/core/connection/product_instance.py#L403-L428","https://pypi.org/project/ansys-geometry-core","https://github.com/advisories/GHSA-38jr-29fh-w9vm"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1127","url":"https://osv.dev/vulnerability/PYSEC-2026-1127"}],"summary":"ansys-geometry-core OS Command Injection vulnerability"}