~ / search / GHSA-mr82-8j83-vxmv

GHSA-mr82-8j83-vxmv

Pydantic regular expression denial of service

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-3772

Packages

EcosystemPackageAffectedFixed in
PyPI pydantic >= 2.0.0, < 2.4.0 2.4.0
PyPI pydantic < 1.10.13 1.10.13

Details

As written in the advisory (Markdown source, shown as plain text).

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

References

External links from the advisory. They lead to third-party sites.