183 matches found
[SECURITY] Fedora 33 Update: python-pydantic-1.6.2-1.fc33
Data validation and settings management using python type hinting...
Denial Of Service (DoS)
pydantic is vulnerable to denial of service. An attacker is able to exploit the vulnerability by passing either infinity , inf or floatinf or their negatives to datetime or data fields causing the validaton to run in loops with 100% CPU usage...
abstractioutils (>=1.0.0 <=1.0.6), alignn (>=2023.4.27 <=2024.2.4) +59 more potentially affected by CVE-2021-29510 via pydantic (>=1.8.0 <=1.8.1)
pydantic PYPI version =1.8.0, =1.0.0, =2023.4.27, =0.0.1, =0.0.1, =2.2.0, =0.1.1, =3.30.0, =1.28.19, =1.12.24, =1.6.33, =0.5.18, =0.1.0a1, =0.1.0a2 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...
altest (=0.1.0), apigentools (>=1.4.0 <=1.6.1) +114 more potentially affected by CVE-2021-29510 via pydantic (>=1.7.0 <=1.7.3)
pydantic PYPI version =1.7.0, =1.4.0, =0.4.2, =0.0.2, =0.0.5, =0.2.0, =0.1.0, =3.22.0, =0.0.4, =0.0.1, =0.6.22, =0.8.0, =0.9.0 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...
3dfin (>=0.2.0rc0 <=0.6.0a4), 42videobricks-python-client (=1.1.2) +7690 more potentially affected by CVE-2021-29510 via pydantic (>=0.12.1 <=1.6.1)
pydantic PYPI version =0.12.1, =0.2.0rc0, =0.1.0, =0.1.0, =0.1.10, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.2.5 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...
GHSA-5JQP-QGF6-3PVH Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...
CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
DEBIAN-CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
abstractioutils (>=1.0.0 <=1.0.6), alignn (>=2023.4.27 <=2024.2.4) +59 more potentially affected by CVE-2021-29510 via pydantic (>=1.8.0 <=1.8.1)
pydantic PYPI version =1.8.0, =1.0.0, =2023.4.27, =0.0.1, =0.0.1, =2.2.0, =0.1.1, =3.30.0, =1.28.19, =1.12.24, =1.6.33, =0.5.18, =0.1.0a1, =0.1.0a2 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...
PYSEC-2021-47
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
3dfin (>=0.2.0rc0 <=0.6.0a4), 42videobricks-python-client (=1.1.2) +7690 more potentially affected by CVE-2021-29510 via pydantic (>=0.12.1 <=1.6.1)
pydantic PYPI version =0.12.1, =0.2.0rc0, =0.1.0, =0.1.0, =0.1.10, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.2.5 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...
CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
PYSEC-2021-47
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
Design/Logic Flaw
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
altest (=0.1.0), apigentools (>=1.4.0 <=1.6.1) +114 more potentially affected by CVE-2021-29510 via pydantic (>=1.7.0 <=1.7.3)
pydantic PYPI version =1.7.0, =1.4.0, =0.4.2, =0.0.2, =0.0.5, =0.2.0, =0.1.0, =3.22.0, =0.0.4, =0.0.1, =0.6.22, =0.8.0, =0.9.0 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...
UBUNTU-CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...
CVE-2021-29510
Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...