PyPI/pydantic CVE-2021-29510: unknown, EPSS 0.97%

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date

Action: Upgrade pydantic to 1.6.2 or later.

pip install pydantic==1.6.2

pip install pydantic==1.7.4

pip install pydantic==1.8.2

Affected

introduced	fixed	last affected
0	1.6.2	-
1.7	1.7.4	-
1.8	1.8.2	-

Fixed versions

1.6.2

1.7.4

1.8.2

Sources

osv: PYSEC-2021-47
https://github.com/samuelcolvin/pydantic/security/advisories/GHSA-5jqp-qgf6-3pvh
https://github.com/samuelcolvin/pydantic/commit/7e83fdd2563ffac081db7ecdf1affa65ef38c468

CVE-2021-29510 · published 2021-05-13T19:15:00Z · modified 2026-06-08T11:15:47.381921256Z · JSON