—

PYSEC-2022-182

Quick fix

PYSEC-2022-182 — admesh: upgrade to the fixed version with the command below.

pip install --upgrade 'admesh>=0.98.5'

Details

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/admesh

Introduced in: 0Fixed in: 0.98.5

Fixpip install --upgrade 'admesh>=0.98.5'

References

https://github.com/admesh/admesh/issues/28[REPORT]
https://github.com/advisories/GHSA-5jrq-582v-9767[ADVISORY]