An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method.
pymatgen
{ "last_known_affected_version_range": "<= 2022.9.21" }