Vulnerabilities for pymatgen

First version without a known vulnerability: 2025.10.7

Details

• GHSA-vgv8-5cpj-qj2f2024-02-21

  pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

  Fixed in: 2024.2.20, c231cbd3d5147ee920a37b6ee9dd236b376bcf5a

• GHSA-5jqp-885w-xj322022-11-10

  pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

  Fixed in: 2025.10.7