Homepage
About Snyk

pymatgen@2023.1.20 vulnerabilities

Python Materials Genomics is a robust materials analysis code that defines core object representations for structures and molecules with support for many electronic structure codes. It is currently the core analysis code powering the Materials Project (https://materialsproject.org).

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the pymatgen package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Command Injection

pymatgen is a Python Materials Genomics is a robust materials analysis code that defines core object representations for structures and molecules with support for many electronic structure codes. It is currently the core analysis code powering the Materials Project (https://materialsproject.org).

Affected versions of this package are vulnerable to Command Injection due to a flawed code segment involving a regular expression operation followed by the use of eval() function in the JonesFaithfulTransformation.from_transformation_str() method. An attacker can execute arbitrary code when parsing untrusted input.

How to fix Command Injection?

Upgrade pymatgen to version 2024.2.20 or higher.

[,2024.2.20)
  • M
Regular Expression Denial of Service (ReDoS)

pymatgen is a Python Materials Genomics is a robust materials analysis code that defines core object representations for structures and molecules with support for many electronic structure codes. It is currently the core analysis code powering the Materials Project (https://materialsproject.org).

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) via the GaussianInput.from_string method, due to the usage of insecure regex.

How to fix Regular Expression Denial of Service (ReDoS)?

There is no fixed version for pymatgen.

[0,)
Go back to all versions of this package