GHSA-xw74-2wwc-m47q: uncontrolled memory allocation in the meshio VTK Reader
A weakness has been identified in nschloe meshio versions up to 5.3.5. Manipulation of the DIMENSIONS argument of an unknown function in the VTK Reader component, in meshio/_vtk_42.py, can lead to uncontrolled memory allocation. The attack can be executed remotely. The project was informed early through an issue report but has not responded yet.
CERT24