CVE-2024-23346 | materialsproject pymatgen prior 2024.2.20 from_transformation_str command injection

A vulnerability was found in materialsproject pymatgen. It has been rated as critical. Affected by this issue is the function from_transformation_str. The manipulation leads to command injection.

This vulnerability is handled as CVE-2024-23346. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.