Pydantic — CVE history (PyPI)
Pydantic
3 CVEs affect the Pydantic PyPI package (highest CVSS 5.9). Latest disclosed: 2026-07-06. Full CVE history sourced from NVD.
Summary
- Package
Pydantic(PyPI)- Total CVEs
3- Actively exploited (CISA KEV)
- 0
- Highest CVSS
5.9- Latest disclosed
- 2026-07-06
Recent CVEs (top 3)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58203 | Medium | 5.3 | — | 2026-07-06 | pydantic-settings provides settings management using Pydantic. |
CVE-2024-3772 | Medium | 5.9 | — | 2024-04-15 | Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string. |
CVE-2021-29510 | Low | 3.3 | — | 2021-05-13 | Pydantic is a data validation and settings management using Python type hinting. |
All-time worst (top 3 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-3772 | Medium | 5.9 | — | 2024-04-15 | Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string. |
CVE-2026-58203 | Medium | 5.3 | — | 2026-07-06 | pydantic-settings provides settings management using Pydantic. |
CVE-2021-29510 | Low | 3.3 | — | 2021-05-13 | Pydantic is a data validation and settings management using Python type hinting. |