Moderate severityNVD Advisory· Published Nov 9, 2022· Updated May 1, 2025
Exponential ReDoS in pymatgen leads to denial of service
CVE-2022-42964
Description
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
pymatgenPyPI | <= 2022.9.21 | — |
Affected products
2Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.