pydantic
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting pydanticpage 1 of 1
- CVE-2021-29510LOWCVSS 3.3EG 3.3fixed in 1.6.2, 1.8.2 or 1.7.4, by version range2021-05-13
vulnerable: 0.0.1 ... v0.0.2 (152 versions)
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forev…
- CVE-2024-3772MEDIUMCVSS 5.9EG 5.9fixed in 2.4.0 or 1.10.13, by version range2024-04-15
vulnerable: 0.0.1 ... 2.3.0 (112 versions)
Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
Check whether pydantic is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pydantic CVEs against the assets you own.
Book a Demo →