CVE-2021-29510

2 advisories.

PyPI/pydantic CVE-2021-29510: low 3.3

Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Action: Upgrade pydantic to 1.6.2 or later.

pip install pydantic==1.6.2

pip install pydantic==1.8.2

pip install pydantic==1.7.4

Affected

introduced	fixed	last affected
0	1.6.2	-
1.8	1.8.2	-
1.7	1.7.4	-

Fixed versions

1.6.2

1.8.2

1.7.4

Sources

CVE-2021-29510 · published 2021-05-13T20:23:17Z · modified 2026-07-08T06:29:37.051969770Z · JSON

PyPI/pydantic CVE-2021-29510: unknown

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date