Lucene search
+L

183 matches found

OSV
OSV
added 2024/04/15 3:31 a.m.6 views

GHSA-MR82-8J83-VXMV Pydantic regular expression denial of service

Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

5.9CVSS5.9AI score0.00949EPSS
Exploits1References6
vulnersOsv
vulnersOsv
added 2024/04/15 3:31 a.m.5 views

ablator (=0.0.1b3), accidental-vulnerability (>=2.0.4 <=2.0.5) +322 more potentially affected by CVE-2024-3772 via pydantic (>=0.12.1 <=1.10.12)

pydantic PYPI version =0.12.1, =2.0.4, =0.1.1, =0.0.1, =0.0.1, =1.1.1, =0.0.2, =0.0.1, =0.1.38, =0.0.1, =0.0.23 and more Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

7.5CVSS6.3AI score0.00949EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2024/04/15 3:31 a.m.23 views

Pydantic regular expression denial of service

Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

7.5CVSS5.5AI score0.00949EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2024/04/15 3:16 a.m.1 views

DEBIAN-CVE-2024-3772

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

7.5CVSS6.1AI score0.00949EPSS
Exploits1References1
OSV
OSV
added 2024/04/15 1:42 a.m.5 views

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

5.9CVSS6.6AI score0.00949EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/04/15 1:42 a.m.49 views

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

5.9CVSS5.6AI score0.00949EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/04/15 1:42 a.m.14 views

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

5.9CVSS5.6AI score0.00949EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.58 views

Pydantic 安全漏洞

Pydantic is a library in the Pydantic open source. Data validation can be performed using Python type hints. A security vulnerability exists in Pydantic versions prior to 2.4.0, 1.10.13, which stems from a vulnerability that allows remote attackers to cause a denial of service via a crafted email...

7.5CVSS5.7AI score0.00949EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/04/14 12:0 a.m.5 views

PT-2024-5856

Name of the Vulnerable Software and Affected Versions Pydantic versions prior to 2.4.0 Pydantic versions prior to 1.10.13 Description The issue is related to the use of regular expressions in the Pydantic library, which can lead to a denial of service when exploited by a remote attacker. This can...

7.5CVSS6.5AI score0.00949EPSS
Exploits1References28
OpenVAS
OpenVAS
added 2023/12/13 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-6553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.00967EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2023/12/12 5:47 p.m.40 views

USN-6553-1: Pydantic vulnerability

Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial of service via application crash. CVE-2021-29510...

7.5CVSS7.3AI score0.00967EPSS
Exploits0
OSV
OSV
added 2023/12/12 5:47 p.m.5 views

USN-6553-1 pydantic vulnerability

Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial of service via application crash. CVE-2021-29510...

7.5CVSS7.1AI score0.00967EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/12 12:0 a.m.21 views

Ubuntu 20.04 ESM : Pydantic vulnerability (USN-6553-1)

The remote Ubuntu 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-6553-1 advisory. Nina Jensen discovered that Pydantic incorrectly handled user input in the date and datetime fields. An attacker could possibly use this issue to cause a denial o...

7.5CVSS7.3AI score0.00967EPSS
Exploits0References2
Fedora
Fedora
added 2023/05/26 1:52 a.m.39 views

[SECURITY] Fedora 38 Update: python-fastapi-0.95.2-1.fc38

FastAPI is a modern, fast high-performance, web framework for building APIs with Python 3.7+ based on standard Python type hints. The key features are: =EF=BF=BD=EF=BF=BD=EF=BF=BD Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python...

7.4AI score
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:43 a.m.3 views

SUSE CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

7.5CVSS6.8AI score0.00967EPSS
Exploits0References3
Fedora
Fedora
added 2022/05/07 4:56 a.m.37 views

[SECURITY] Fedora 36 Update: python-fastapi-0.75.2-1.fc36

FastAPI is a modern, fast high-performance, web framework for building APIs with Python 3.6+ based on standard Python type hints. The key features are: =EF=BF=BD=EF=BF=BD=EF=BF=BD Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python...

5.5CVSS6AI score0.0155EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.7 views

The vulnerability of Pydantic’s date fields in data analysis and verification processes, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the date field in Pydantic’s data analysis and verification mechanisms is related to the incorrect handling of data types like infinity, inf, and float'inf' within the date field. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS7.2AI score0.00967EPSS
Exploits0References5Affected Software2
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.18 views

Fedora: Security Advisory for python-fastapi (FEDORA-2021-e7fabd81fb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00967EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/05/27 12:0 a.m.18 views

Fedora: Security Advisory for python-pydantic (FEDORA-2021-4d3de3183f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.6AI score0.00967EPSS
Exploits0References2
ArchLinux
ArchLinux
added 2021/05/25 12:0 a.m.226 views

[ASA-202105-24] python-pydantic: denial of service

Arch Linux Security Advisory ASA-202105-24 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-29510 Package : python-pydantic Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1951 Summary ======= The package python-pydant...

7.5CVSS1.6AI score0.00967EPSS
Exploits0References4
Rows per page
Query Builder