CVE-2024-23346

PoC ×2—

CVSS 3.1

7.8 high

EPSS

4%p89

Published

Feb 21, 2024 (Feb 21, 2024)

Modified

Jun 17, 2026

Description

Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.20. This method insecurely utilizes `eval()` for processing input, enabling execution of arbitrary code when parsing untrusted input. Version 2024.2.20 fixes this issue.

Vendors: materialsvirtuallab
Products: pymatgen
Weakness: CWE-77
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.