ROOT-APP-PYPI-GHSA-4XGF-CPJX-PC3J GHSA-4xgf-cpjx-pc3j in pydantic-settings - Patched by Root

Root has patched GHSA-4xgf-cpjx-pc3j in the pydantic-settings package for Root:PyPI. Multiple fixed versions available...

PT-2026-76505

Root has patched GHSA-4xgf-cpjx-pc3j in the pydantic-settings package for Root:PyPI. Multiple fixed versions available...

MGASA-2026-0260 Updated python-pydantic-settings packages fix a security vulnerability

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secretsdir, enabling local file read and bypassing secretsdirmaxsize. CVE-2026-58203...

Updated python-pydantic-settings packages fix a security vulnerability

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secretsdir, enabling local file read and bypassing secretsdirmaxsize. CVE-2026-58203...

CVE-2026-58203

A flaw was found in the pydantic-settings component. When configured to handle nested secrets, this vulnerability allows an attacker to read sensitive files from outside the designated secrets directory. By placing a specially crafted symbolic link within the secrets directory, an attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-58203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a...

CVE-2026-58203

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

CVE-2026-58203

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

UBUNTU-CVE-2026-58203

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

CVE-2026-58203

CVE-2026-58203 affects pydantic-settings, specifically NestedSecretsSettingsSource. From 2.12.0 through 2.14.2, when secrets_nested_subdir is true, a directory entry that is a symbolic link to outside secrets_dir is followed, enabling reading files outside the configured directory and bypassing s...

CVE-2026-58203

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

adoptrank (>=0.1.0, <=0.2.1), agent-nexus-cli (>=0.1.0, <=0.1.31) +174 more potentially affected by CVE-2026-58203 via pydantic-settings (>=2.12.0, <=2.14.1)

pydantic-settings PYPI version =2.12.0, =0.1.0, =0.1.0, =0.1.0, =0.6.1rc1, =0.1.0, =1.6.6, =0.4.3, =1.0.0, =0.11.0, =0.26.0, =0.10.0, =0.5.8, =2.0.1, =3.7.4 and more Source cves: CVE-2026-58203 Source advisory: MEND:CVE-2026-58203...

EUVD-2026-41878

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

CVE-2026-58203 NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

CVE-2026-58203

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

CVE-2026-58203: Improper Limitation of a Pathname to a Restricted Directory

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secretsdir. When secretsnestedsubdir=True, a directory entry inside secretsdir that is a symbolic link pointing outside secretsdir is...

[SECURITY] Fedora 43 Update: python-pydantic-settings-2.14.2-1.fc43

Settings management using pydantic...

Fedora 43 : python-pydantic-settings (2026-ade10efd88)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ade10efd88 advisory. Update to 2.14.2; fixes GHSA-4xgf-cpjx-pc3j. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

[SECURITY] Fedora 44 Update: python-pydantic-settings-2.14.2-1.fc44

Settings management using pydantic...

Fedora 44 : python-pydantic-settings (2026-6b7571be30)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6b7571be30 advisory. Update to 2.14.2; fixes GHSA-4xgf-cpjx-pc3j. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...