Skip to content
OpenAdvisories
Low USN-6553-1 1 CVE

pydantic vulnerability

Published Dec 12, 2023 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Nina Jensen discovered that Pydantic incorrectly handled user input in the
date and datetime fields. An attacker could possibly use this issue to
cause a denial of service via application crash. (CVE-2021-29510)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS pydantic 1.2-1ubuntu0.1~esm1

Vulnerabilities 1

  • Low 3.3
    CVE-2021-29510

    Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

    Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (or their negatives) to `datetime` or `date` fields causes validation to run forever with 100% CPU usa…

    samuelcolvin pydantic pydantic pydantic Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2021-29510