Search for packages
| purl | pkg:pypi/pymatgen@2018.3.14 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-acsg-2jdc-gfcp
Aliases: CVE-2024-23346 GHSA-vgv8-5cpj-qj2f PYSEC-2024-226 |
Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.20. This method insecurely utilizes `eval()` for processing input, enabling execution of arbitrary code when parsing untrusted input. Version 2024.2.20 fixes this issue. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-30T20:34:07.159377+00:00 | Pypa Importer | Affected by | VCID-acsg-2jdc-gfcp | https://github.com/pypa/advisory-database/blob/main/vulns/pymatgen/PYSEC-2024-226.yaml | 38.6.0 |