pydantic
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting pydanticpage 1 of 1
- CVE-2021-29510LOWCVSS 3.3EG 3.3✓ Fixed in 1.6.22021-05-13
vulnerable: 0.0.1 ... 1.8.1 (79 versions)
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forev…
- CVE-2024-3772MEDIUMCVSS 5.9EG 5.9✓ Fixed in 1.10.132024-04-15
vulnerable: 0.0.1 ... 1.9.2 (103 versions)
Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
Check whether pydantic is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pydantic CVEs against the assets you own.
Start Free Scan →