Threats affecting pkg:github/openbabel/openbabel

A medium severity vulnerability (CVE-2026-3408) exists in Open Babel versions 3.1.0 and 3.1.1. It involves a NULL pointer dereference in the OBAtom::GetExplicitValence function within the CDXML File Handler component. This flaw can be triggered remotely and has a publicly available exploit. A patch identified by commit e23a224b8fd9d7c2a7cde9ef4ec6afb4c05aa08a is available to address the issue.