CVE-2024-3772

Published: 15 April 2024

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-3772
• https://github.com/pydantic/pydantic/pull/7360
• https://github.com/pydantic/pydantic/commit/e4393ae6145c4dadff739990bb0116c6dec3441b (v2.4.0)
• https://github.com/pydantic/pydantic/pull/7673
• https://github.com/pydantic/pydantic/commit/59d8f38fd6220e3917c53785dbc70317d6f8e631 (v1.0.13)
• NVD
• Launchpad
• Debian