How severe is CVE-2022-42964?

CVE-2022-42964 has a CVSS v3 score of 5.9 (MEDIUM).

CVE-2022-42964

Name: pymatgen
Author: materialsvirtuallab

5.9MEDIUM

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method

Published: 11/9/2022Updated: 2/4/2025

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method

AI AnalysisPowered by AI

Affected Products

materialsvirtuallabpymatgen

References

https://research.jfrog.com/vulnerabilities/pymatgen-redos-xray-257184/
ExploitThird Party Advisory
https://research.jfrog.com/vulnerabilities/pymatgen-redos-xray-257184/
ExploitThird Party Advisory