{"action":"Upgrade openbabel to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"openbabel","cve_ids":["CVE-2025-10995"],"ecosystem":"PyPI","epss":0.00258,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-8j3x-m868-cpw8","id":"tcs_01M5KH1G7EZSEH3P478Q019WBM","modified_at":"2026-07-13T16:32:07.091505955Z","published_at":"2026-07-13T15:46:25.510957Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2776","https://github.com/openbabel/openbabel/security/advisories/GHSA-8j3x-m868-cpw8","https://nvd.nist.gov/vuln/detail/CVE-2025-10995","https://github.com/openbabel/openbabel/issues/2832","https://github.com/openbabel/openbabel/issues/2913","https://github.com/openbabel/openbabel/commit/d4621d417c167b50cc8ce7aa3a02557e5b2b81c5","https://github.com/openbabel/openbabel","https://github.com/user-attachments/files/22318572/poc.zip","https://vuldb.com/?ctiid.325923","https://vuldb.com/?id.325923","https://vuldb.com/?submit.654059","https://pypi.org/project/openbabel","https://github.com/advisories/GHSA-8j3x-m868-cpw8"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-2776","url":"https://osv.dev/vulnerability/PYSEC-2026-2776"}],"summary":"Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow"}