View all vulnerabilities

CVE-2024-3772

Pydantic regular expression denial of service

Description

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
5.8
Score Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Versions
pydantic >= 2.0.0 < 2.4.0; pydantic < 1.10.13
Severity
Medium
Medium
Medium
Ecosystem
Python
Publish Date
April 14, 2024
Modified Date
February 13, 2025