#AssetLib
CVE-2026-19970 - Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
CVE ID : CVE-2026-19970

Published : Aug. 17, 2026, 2:16 a.m. | 19 minutes ago

Description : A vulnerability was detected in Open Asset Import Library As...
CVE-2026-19970 - Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be …
cvefeed.io
August 17, 2026 at 3:09 AM
new release of @icons, my custom node icon library for #godot !

61 new icons, bringing the total to 618(!!) icons 🤯, and improvements to the in-editor icon picker

available down below, as well as on GitHub and soon on the Godot Asset Store and AssetLib

voxybuns.itch.io/at-icons/dev...
July 19, 2026 at 8:34 PM
CVE-2026-14610 - Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow
CVE ID : CVE-2026-14610

Published : July 3, 2026, 8:45 p.m. | 3 hours, 29 minutes ago

Description : A flaw has been found in Open Asset Import Library Assimp up to...
CVE-2026-14610 - Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be …
cvefeed.io
July 4, 2026 at 2:49 AM
CVE-2026-14604 - Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free
CVE ID : CVE-2026-14604

Published : July 3, 2026, 6:30 p.m. | 3 hours, 17 minutes ago

Description : A vulnerability was determined in Open Asset Import Library Assimp up to...
CVE-2026-14604 - Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp of the component PLY Model Handler. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The …
cvefeed.io
July 3, 2026 at 9:56 PM
In this case, I used the options menu from an AssetLib plugin, but it wasn't resizing when I changed resolutions.

Turns out it was because the debug window embedding overrides the resolution settings.

Another case where you can't just vibe code your way out of any problem.
June 2, 2026 at 6:58 PM
🚨 EUVD-2026-33519
📊 4.8/10

📝 A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer....

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33519

#cybersecurity #infosec #cve #euvd
June 1, 2026 at 12:00 AM
CVE-2026-10197 - Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference
CVE ID : CVE-2026-10197

Published : May 31, 2026, 10:16 p.m. | 15 minutes ago

Description : A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF...
CVE-2026-10197 - Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference
A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. It is …
cvefeed.io
May 31, 2026 at 10:58 PM
do you have a link? i cant find it in the assetlib window
May 31, 2026 at 5:08 PM
I made 2 godot sound plugins:
Soundwave sfx: godotengine.org/asset-librar...
and Soundwave Music: godotengine.org/asset-librar...
Theyll make using sound in your next game A TON easier :)

#orosemo #godot #plugin #game #gamedev #dev #code #bluesky #assetlib #help
Soundwave Music Manager - Godot Asset Library
godotengine.org
May 14, 2026 at 1:50 PM
Yes. It's easier to use than Unity.
The features I liked the most from Godot are Theme Editor, Shader Editor, Exported Properties, AssetLib. I also use Dialogic plugin for dialogues.
May 10, 2026 at 2:14 PM
I'm using something off the godot assetlib which seems like it would work great but breaks even if I follow instructions
May 9, 2026 at 12:02 AM
You guessed it, I want to make phasers and I'm trying to see if any of these dodgy looking assets off assetlib with stupid names are worth my time or if I really have to handcraft this shit myself
May 6, 2026 at 9:06 PM
Recently I released an addon for Godot that merges all selected MeshInstance3D's into a single mesh instance.

It's ideal for creating meshes that can be easily used in a MultiMeshInstance3D for example.

Search in AssetLib: "mesh merge"
or github.com/rikh42/meshm...

#godot #indiedev #gamedev
April 14, 2026 at 2:07 PM
The plugin is already in the AssetLib!!

Since the plugin stores the settings and cheatsheets globally, you can add it to any project in like 3 clicks, directly in the engine!!

#Godot #GameDev #Tool
March 27, 2026 at 9:25 PM
godot really needs a system to automate assetlib downloads, i know gd-plug exists, but it seems to only naively download a specific state (tag, commit, branch) of a repo instead of its binary releases... it seems like it's only designed for libraries that are written in gdscript...
March 7, 2026 at 6:24 PM
The mode switches (2d, 3d, script and assetlib tabs and everything else that is added by the plugins) feel like they should just be tabs alongside opened scenes. UE style where everything is a window/tab that can be moved, repositioned and resized
March 5, 2026 at 11:30 AM
Hopping in to say ‘edit resources as table 2’ on AssetLib ticked every box I needed here… gonna potentially do a little expansion, but that’s the shit right there. Even has csv export/import
Hey Godot folks.. anyone using a spreadsheet plugin to do asset population work? Looking for a way to work on a few hundred resources at once… balancing numbers, searching by tags etc etc.

Really a question for folks working on bigger scale stuff I suppose, but interested if solutions exist.
March 3, 2026 at 10:15 PM
I truly don't understand this selection bar in Godot. I can open scenes into it, and if the scene has an attached script, I can select Script above (an order which still baffles me), but I can't open a script as a tab here? What's the reasoning behind this architecture?
February 28, 2026 at 1:11 AM
I didn't get to publish this to the AssetLib, but you can just get it on the github repo: github.com/albertnez/qu...
February 21, 2026 at 8:39 AM
CVE-2025-15538 - Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
CVE ID : CVE-2025-15538

Published : Jan. 18, 2026, 11:15 p.m. | 16 minutes ago

Description : A security vulnerability has been detected in Open Asset Import Library Assimp up ...
CVE-2025-15538 - Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be …
cvefeed.io
January 19, 2026 at 12:43 AM
Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after fre... A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnera...

Origin | Interest | Match
CVE-2025-15538 | THREATINT
CVE-2025-15538: A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to ...
cve.threatint.eu
January 19, 2026 at 12:36 AM
So, I published TerraBrush this weekend on the AssetLib, as a GDExtension 🥳.

My only problem right now is that people need to uncheck the "Ignore asset root" which is confusing!

What am I doing wrong, I thought my package structure was fine?

#GodotEngine #gamedev #indiedev
November 26, 2025 at 12:01 PM