CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-42964
High (7.5) in materialsvirtuallab pymatgen. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in pymatgen 2025.10.7.
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1333
- Published
- Modified
- Record from
- the NVD, synced
Affected
- materialsvirtuallab:pymatgen
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5jqp-885w-xj32 | PyPI | pymatgen | <=2022.9.21 | no fix published |
| PYSEC-2026-909 | PyPI | pymatgen | <2025.10.7 | 2025.10.7 |