CVE-2024-23346: Materialsvirtuallab Pymatgen

High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.20. This method insecurely utilizes `eval()` for processing input, enabling execution of arbitrary code when parsing untrusted input. Version 2024.2.20 fixes this issue.

Affected products

• Materialsvirtuallab Pymatgen: before 2024.2.20 (fixed in 2024.2.20)

Published 2024-02-21. Last modified 2026-06-17.