Approved changes feed: RSS · Atom

cpe:2.3:a:materialsvirtuallab:pymatgen:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMaterialsvirtuallab (a866a86b-a08b-5c76-b4e0-d4a998806101)
ProductPymatgen (ebb28148-71b4-52b1-86d0-e0d8d1d1d4dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pymatgen purl2cpe 2026-06-01 10:17:27.786121
pkg:deb/ubuntu/pymatgen purl2cpe 2026-06-01 10:17:27.786124
pkg:github/materialsproject/pymatgen purl2cpe 2026-06-01 10:17:27.786127
pkg:pypi/pymatgen purl2cpe 2026-06-01 10:17:27.786129
pkg:rpm/opensuse/python-pymatgen purl2cpe 2026-06-01 10:17:27.786132

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42964 vulnerable 2026-06-08 05:49:30.999604 Exponential ReDoS in pymatgen leads to denial of service
MEDIUM (5.9)
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method
Published: 2022-11-09T00:00:00.000Z
Updated: 2025-05-01T19:19:37.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.