Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-3772

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

VectorNETWORK

PublishedApr 15, 2024, 03:16

Published By430a6cef-dc26-47e3-9fa8-52fb7f19644e

Base Score

Score7.5

Package (Ecosystem)IntroducedFixedLimit

pydantic(PyPI)2.0.02.4.0N/A

pydantic(PyPI)01.10.13N/A

CWE-1333

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK