Approved changes feed: RSS · Atom
cpe:2.3:a:mesa_project:mesa:*:*:*:*:*:python:*:*part: a version: * update: *
| Vendor | Mesa Project (787713fd-1500-5cab-ade7-c0cd9099c533) |
|---|---|
| Product | Mesa (ba735595-cc55-5331-b95f-239cee9efe45) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-29075 |
vulnerable | 2026-06-08 07:55:16.086752 |
Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner
HIGH (8.3)
Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd.
Published: 2026-03-06T16:30:08.146Z
Updated: 2026-03-09T15:00:07.203Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.