ansys-pyensight-core (>=0.9.8, <=0.9.18), pyansys (2025.1.3) potentially affected by unknown CVE via usd-core (24.8.0)

usd-core PYPI version 24.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - ansys-pyensight-core =0.9.8, =0.9.18 - pyansys 2025.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-GRJP-54V3-C442...

awpy (>=2.0.0b2, <=2.0.0b4) potentially affected by unknown CVE via usd-core (24.11.0)

usd-core PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - awpy =2.0.0b2, =2.0.0b4 Source cves: unknown CVE Source advisory: OSV:GHSA-GRJP-54V3-C442...

ansys-pyensight-core (>=0.10.12, <=0.10.17), genesis-world (0.3.6) potentially affected by unknown CVE via usd-core (25.8.0)

usd-core PYPI version 25.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - ansys-pyensight-core =0.10.12, =0.10.17 - genesis-world 0.3.6 Source cves: unknown CVE Source advisory: GHSA-GRJP-54V3-C442...

ansys-pyensight-core (>=0.10.12, <=0.10.17), genesis-world (0.3.6) potentially affected by unknown CVE via usd-core (25.8.0)

usd-core PYPI version 25.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - ansys-pyensight-core =0.10.12, =0.10.17 - genesis-world 0.3.6 Source cves: unknown CVE Source advisory: OSV:GHSA-GRJP-54V3-C442...

rewarped (>=1.3.0, <=1.3.3) potentially affected by unknown CVE via usd-core (24.5.0)

usd-core PYPI version 24.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - rewarped =1.3.0, =1.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-GRJP-54V3-C442...

Use-After-Free

usdcore is vulnerable to a Use-After-Free. The vulnerability is due to multi-threaded deletion of SdfPrimPathNode objects accessing freed memory, allowing an attacker to exploit a crafted .usd file to cause crashes or achieve remote code execution...

Use After Free

Overview usd-core is a Pixar's Universal Scene Description Affected versions of this package are vulnerable to Use After Free. Affected versions of the usd-core package are vulnerable to Use-After-Free due to unsynchronised destruction of SdfPrimPathNode objects in the SdfPathNode module that...

ansys-pyensight-core (>=0.9.8, <=0.9.18), pyansys (2025.1.3) potentially affected by unknown CVE via usd-core (24.8.0)

usd-core PYPI version 24.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - ansys-pyensight-core =0.9.8, =0.9.18 - pyansys 2025.1.3 Source cves: unknown CVE Source advisory: OSV:GHSA-58P5-R2F6-G2CJ...

rewarped (>=1.3.0, <=1.3.3) potentially affected by unknown CVE via usd-core (24.5.0)

usd-core PYPI version 24.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - rewarped =1.3.0, =1.3.3 Source cves: unknown CVE Source advisory: OSV:GHSA-58P5-R2F6-G2CJ...

awpy (>=2.0.0b2, <=2.0.0b4) potentially affected by unknown CVE via usd-core (24.11.0)

usd-core PYPI version 24.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on usd-core and may be impacted: - awpy =2.0.0b2, =2.0.0b4 Source cves: unknown CVE Source advisory: OSV:GHSA-58P5-R2F6-G2CJ...