Approved changes feed: RSS · Atom
cpe:2.3:a:mesa:mesa:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mesa (01f80e9e-f531-5f56-809e-55c325c55698) |
|---|---|
| Product | Mesa (4b599f3f-d23b-5b68-b87c-3a89975443b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29075 |
vulnerable | 2026-06-08 07:55:16.085165 |
Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner
HIGH (8.3)
Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd.
Published: 2026-03-06T16:30:08.146Z
Updated: 2026-03-09T15:00:07.203Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.