ROS-20240827-14

A vulnerability in the Pydantic data validation library involves the use of regular expressions. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Security Bulletin: Vulnerability in Pydantic affects IBM Process Mining CVE-2024-3772

Summary There is a vulnerability in Pydantic that could allow an attacker to cause a denial of service on the system. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2024-3772 DESCRIPTION:...

OPENSUSE-SU-2024:13869-1 python310-pydantic-2.6.4-2.1 on GA media

These are all security issues fixed in the python310-pydantic-2.6.4-2.1 package on the GA media of openSUSE Tumbleweed...

python-pydantic: regular expression denial of service via crafted email string

A flaw was found in Pydantic, where it did not properly validate regular expressions containing white spaces. This flaw allows remote users to cause a denial of service attack via a crafted email string...

CVE-2024-35189

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

Fedora: Security Advisory for python-pydantic (FEDORA-2024-fc5dc50bb6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : python-pydantic (2024-fc5dc50bb6)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fc5dc50bb6 advisory. Security fix for CVE-2024-3772 regular expression denial of service via crafted email string. Update to latest 1.10.x release:...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2024-3772]

Summary Python module Pydantic is used by IBM App Connect Enterprise Certified Container for validating values in the mapping assistant. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to regular expression denial of service. Th...

Regular Expression Denial Of Service (ReDoS)

pydantic is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to a regex with inefficient complexity in networks.py, which allows an attacker to cause excessive computation time via a crafted email string...

CVE-2024-3772

A flaw was found in Pydantic, where it did not properly validate regular expressions containing white spaces. This flaw allows remote users to cause a denial of service attack via a crafted email string. Mitigation Mitigation for this issue is either not available or the currently available optio...

ablator (=0.0.1b3), accidental-vulnerability (>=2.0.4 <=2.0.5) +322 more potentially affected by CVE-2024-3772 via pydantic (>=0.12.1 <=1.10.12)

pydantic PYPI version =0.12.1, =2.0.4, =0.1.1, =0.0.1, =0.0.1, =1.1.1, =0.0.2, =0.0.1, =0.1.38, =0.0.1, =0.0.23 and more Source cves: CVE-2024-3772 Source advisory: OSV:GHSA-MR82-8J83-VXMV...

GHSA-MR82-8J83-VXMV Pydantic regular expression denial of service

Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

Pydantic regular expression denial of service

Regular expression denial of service in Pydantic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

DEBIAN-CVE-2024-3772

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

CVE-2024-3772 Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic 2.4.0, 1.10.13 allows remote attackers to cause denial of service via a crafted email string...

Pydantic 安全漏洞

Pydantic is a library in the Pydantic open source. Data validation can be performed using Python type hints. A security vulnerability exists in Pydantic versions prior to 2.4.0, 1.10.13, which stems from a vulnerability that allows remote attackers to cause a denial of service via a crafted email...