CVE-2024-3772

Regular expression denial of service in Pydantic < 2.4.0

5.9 MediumFix available

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.96%Up 0.9 points since Apr 15, 2024

What each source reports

CVE List Score used 5.9

Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: CVE-2024-3772
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-1333
Updated: 2026-11-02

EUVDEUVD-2024-1252 5.9

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: EUVD-2024-1252
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mr82-8j83-vxmv 5.9

Pydantic regular expression denial of service

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: GHSA-mr82-8j83-vxmv
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-1333
Updated: 2026-11-02

NVD 5.9

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: CVE-2024-3772
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-1333
Updated: 2026-11-02

OSV 5.9

Regular expression denial of service in Pydantic < 2.4.0

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: CVE-2024-3772
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-1333
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-3772 7.5

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: DEBIAN-CVE-2024-3772
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 11 moreShow less

OSVGHSA-mr82-8j83-vxmv 5.9

Pydantic regular expression denial of service

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: GHSA-mr82-8j83-vxmv
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-1333
Updated: 2026-11-02

OSVPYSEC-2026-1812 5.9

Pydantic regular expression denial of service

Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: PYSEC-2026-1812
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:3781 8.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Record: RHSA-2024:3781
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-APP-PYPI-CVE-2024-3772 5.9

CVE-2024-3772 in pydantic - Patched by Root

Root has patched CVE-2024-3772 in the pydantic package for Root:PyPI. Multiple fixed versions available.

Record: ROOT-APP-PYPI-CVE-2024-3772
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-3772 5.9

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

Record: UBUNTU-CVE-2024-3772
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVCLSA-2025-1757895135 No score

TuxCare security update for pydantic (1 CVE)

TuxCare rebuilt pydantic to address 1 CVE. Fixed in v1.10.5.post1+tuxcare.

Record: CLSA-2025-1757895135
Updated: 2026-11-02

OSVCLSA-2026-1789456962 No score

TuxCare security update for pydantic (1 CVE)

TuxCare rebuilt pydantic to address 1 CVE. Fixed in 1.10.0.post1+tuxcare.

Record: CLSA-2026-1789456962
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13869-1 No score

python310-pydantic-2.6.4-2.1 on GA media

These are all security issues fixed in the python310-pydantic-2.6.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13869-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:11424-1 No score

python313-pydantic-2.13.4-2.1 on GA media

These are all security issues fixed in the python313-pydantic-2.13.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:11424-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0310-1 No score

Security update for python-pydantic

This update for python-pydantic fixes the following issues:

CVE-2024-3772: Fixed Regular expression DoS (bsc#1222806)

Record: SUSE-SU-2025:0310-1
Updated: 2026-11-02

OSVUSN-7101-1 No score

pydantic vulnerability

It was discovered that Pydantic incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service via a crafted email string.

Record: USN-7101-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`pydantic` PyPI	2.0.0 up to 2.4.0	2.4.0
`pydantic` PyPI	before 1.10.13	1.10.13
`pydantic` TuxCare:PyPI	1.10.5 up to v1.10.5.post1+tuxcare	v1.10.5.post1+tuxcare
`pydantic` TuxCare:PyPI	1.10.0 up to 1.10.0.post1+tuxcare	1.10.0.post1+tuxcare
`pydantic` Debian:12	before 1.10.4-1+deb12u1, plus listed versions 1.10.4-1	1.10.4-1+deb12u1
`pydantic` Debian:13	before 1.10.13-0.1	1.10.13-0.1
`pydantic` Debian:14	before 1.10.13-0.1	1.10.13-0.1
`pydantic` PyPI	2.0.0 up to 2.4.0, plus listed versions 2.02.0.12.0.22.0.32.1.0 Show 4 moreShow less 2.1.12.2.02.2.12.3.0	2.4.0
`pydantic` PyPI	before 1.10.13, plus listed versions 0.0.10.0.20.0.30.0.40.0.5 Show 45 moreShow less 0.0.60.0.70.0.80.10.100.110.11.10.11.20.120.12.10.130.13.10.140.150.160.16.10.170.180.18.10.18.20.190.20.2.10.200.20.10.20a10.210.220.230.240.250.260.270.27a10.280.290.30.300.30.10.310.31.10.320.32.10.32.20.4	1.10.13
`pydantic` PyPI	before 1.10.13, 2.0.0 up to 2.4.0, plus listed versions 0.0.10.0.20.0.30.0.40.0.5 Show 45 moreShow less 0.0.60.0.70.0.80.10.100.110.11.10.11.20.120.12.10.130.13.10.140.150.160.16.10.170.180.18.10.18.20.190.20.2.10.200.20.10.20a10.210.220.230.240.250.260.270.27a10.280.290.30.300.30.10.310.31.10.320.32.10.32.20.4	1.10.132.4.0

Show 123 moreShow less

Affected packages
Package	Affected	Fixed
`automation-controller-venv-tower` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:4.5.7-1.el8ap	0:4.5.7-1.el8ap
`automation-controller-venv-tower` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:4.5.7-1.el9ap	0:4.5.7-1.el9ap
`receptor` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptorctl` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptor` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptorctl` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptor` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptorctl` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:1.4.8-1.el8ap	0:1.4.8-1.el8ap
`receptor` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`receptorctl` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`receptor` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`receptorctl` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`receptor` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`receptorctl` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:1.4.8-1.el9ap	0:1.4.8-1.el9ap
`python39-cryptography` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python39-cryptography-debuginfo` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography-debugsource` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python39-cryptography` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python39-cryptography-debuginfo` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography-debugsource` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python39-cryptography` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python39-cryptography-debuginfo` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python3x-cryptography-debugsource` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:42.0.5-1.el8ap	0:42.0.5-1.el8ap
`python-cryptography` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python-cryptography-debugsource` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography-debuginfo` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python-cryptography` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python-cryptography-debugsource` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography-debuginfo` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python-cryptography` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python-cryptography-debugsource` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python3-cryptography-debuginfo` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:42.0.5-1.el9ap	0:42.0.5-1.el9ap
`python39-pillow` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:10.3.0-1.el8ap	0:10.3.0-1.el8ap
`python39-pillow-debuginfo` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:10.3.0-1.el8ap	0:10.3.0-1.el8ap
`python3x-pillow` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:10.3.0-1.el8ap	0:10.3.0-1.el8ap
`python3x-pillow-debugsource` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:10.3.0-1.el8ap	0:10.3.0-1.el8ap
`python-pillow` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:10.3.0-1.el9ap	0:10.3.0-1.el9ap
`python-pillow-debugsource` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:10.3.0-1.el9ap	0:10.3.0-1.el9ap
`python3-pillow` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:10.3.0-1.el9ap	0:10.3.0-1.el9ap
`python3-pillow-debuginfo` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:10.3.0-1.el9ap	0:10.3.0-1.el9ap
`python39-gunicorn` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:22.0.0-1.el8ap	0:22.0.0-1.el8ap
`python3x-gunicorn` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:22.0.0-1.el8ap	0:22.0.0-1.el8ap
`python-gunicorn` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:22.0.0-1.el9ap	0:22.0.0-1.el9ap
`python3-gunicorn` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:22.0.0-1.el9ap	0:22.0.0-1.el9ap
`python39-idna` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:3.7-1.el8ap	0:3.7-1.el8ap
`python3x-idna` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:3.7-1.el8ap	0:3.7-1.el8ap
`python39-idna` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.7-1.el8ap	0:3.7-1.el8ap
`python3x-idna` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.7-1.el8ap	0:3.7-1.el8ap
`python-idna` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:3.7-1.el9ap	0:3.7-1.el9ap
`python3-idna` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:3.7-1.el9ap	0:3.7-1.el9ap
`python-idna` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.7-1.el9ap	0:3.7-1.el9ap
`python3-idna` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.7-1.el9ap	0:3.7-1.el9ap
`python39-pydantic` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:1.10.15-1.el8ap	0:1.10.15-1.el8ap
`python3x-pydantic` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:1.10.15-1.el8ap	0:1.10.15-1.el8ap
`python-pydantic` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:1.10.15-1.el9ap	0:1.10.15-1.el9ap
`python3-pydantic` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:1.10.15-1.el9ap	0:1.10.15-1.el9ap
`python39-sqlparse` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:0.5.0-1.el8ap	0:0.5.0-1.el8ap
`python3x-sqlparse` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:0.5.0-1.el8ap	0:0.5.0-1.el8ap
`python-sqlparse` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:0.5.0-1.el9ap	0:0.5.0-1.el9ap
`python3-sqlparse` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:0.5.0-1.el9ap	0:0.5.0-1.el9ap
`python39-black` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python3x-black` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python39-black` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python3x-black` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python39-black` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python3x-black` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:22.8.0-2.el8ap	0:22.8.0-2.el8ap
`python-black` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python3-black` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python-black` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python3-black` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python-black` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python3-black` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:22.8.0-2.el9ap	0:22.8.0-2.el9ap
`python39-aiohttp` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.9.5-1.el8ap	0:3.9.5-1.el8ap
`python39-aiohttp-debuginfo` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.9.5-1.el8ap	0:3.9.5-1.el8ap
`python3x-aiohttp` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.9.5-1.el8ap	0:3.9.5-1.el8ap
`python3x-aiohttp-debugsource` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.9.5-1.el8ap	0:3.9.5-1.el8ap
`python-aiohttp` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.9.5-1.el9ap	0:3.9.5-1.el9ap
`python-aiohttp-debugsource` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.9.5-1.el9ap	0:3.9.5-1.el9ap
`python3-aiohttp` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.9.5-1.el9ap	0:3.9.5-1.el9ap
`python3-aiohttp-debuginfo` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.9.5-1.el9ap	0:3.9.5-1.el9ap
`automation-hub` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:4.9.2-1.el8ap	0:4.9.2-1.el8ap
`python39-galaxy-ng` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:4.9.2-1.el8ap	0:4.9.2-1.el8ap
`python3x-galaxy-ng` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:4.9.2-1.el8ap	0:4.9.2-1.el8ap
`automation-hub` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:4.9.2-1.el9ap	0:4.9.2-1.el9ap
`python-galaxy-ng` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:4.9.2-1.el9ap	0:4.9.2-1.el9ap
`python3-galaxy-ng` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:4.9.2-1.el9ap	0:4.9.2-1.el9ap
`python39-social-auth-app-django` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:5.4.1-1.el8ap	0:5.4.1-1.el8ap
`python3x-social-auth-app-django` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:5.4.1-1.el8ap	0:5.4.1-1.el8ap
`python-social-auth-app-django` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:5.4.1-1.el9ap	0:5.4.1-1.el9ap
`python3-social-auth-app-django` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:5.4.1-1.el9ap	0:5.4.1-1.el9ap
`python39-jinja2` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python3x-jinja2` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python39-jinja2` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python3x-jinja2` Red Hat:ansible_automation_platform_inside:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python39-jinja2` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python3x-jinja2` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:3.1.4-1.el8ap	0:3.1.4-1.el8ap
`python-jinja2` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python3-jinja2` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python-jinja2` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python3-jinja2` Red Hat:ansible_automation_platform_inside:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python-jinja2` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python3-jinja2` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:3.1.4-1.el9ap	0:3.1.4-1.el9ap
`python39-requests` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:2.32.2-1.el8ap	0:2.32.2-1.el8ap
`python3x-requests` Red Hat:ansible_automation_platform_developer:2.4::el8 From an advisory covering 20 CVEs	before 0:2.32.2-1.el8ap	0:2.32.2-1.el8ap
`python39-requests` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:2.32.2-1.el8ap	0:2.32.2-1.el8ap
`python3x-requests` Red Hat:ansible_automation_platform:2.4::el8 From an advisory covering 20 CVEs	before 0:2.32.2-1.el8ap	0:2.32.2-1.el8ap
`python-requests` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:2.32.2-1.el9ap	0:2.32.2-1.el9ap
`python3-requests` Red Hat:ansible_automation_platform_developer:2.4::el9 From an advisory covering 20 CVEs	before 0:2.32.2-1.el9ap	0:2.32.2-1.el9ap
`python-requests` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:2.32.2-1.el9ap	0:2.32.2-1.el9ap
`python3-requests` Red Hat:ansible_automation_platform:2.4::el9 From an advisory covering 20 CVEs	before 0:2.32.2-1.el9ap	0:2.32.2-1.el9ap
`pydantic` Root:PyPI	before 2.3.0+aikido.1	2.3.0+aikido.12.0+aikido.12.0.3+aikido.12.0.1+aikido.12.2.1+aikido.12.2.0+aikido.12.1.0+aikido.12.0.2+aikido.12.1.1+aikido.11.10.12+aikido.11.10.12+aikido.21.10.12+aikido.32.0.1+aikido.22.0.2+aikido.22.0+aikido.22.0.3+aikido.22.3.0+aikido.22.1.0+aikido.22.2.0+aikido.22.1.1+aikido.22.2.1+aikido.22.0+aikido.32.0+aikido.42.0.3+aikido.32.0.1+aikido.32.0.2+aikido.31.10.12+aikido.4
`python-pydantic` SUSE:Linux Enterprise Module for Public Cloud 15 SP4	before 1.10.8-150400.9.10.1	1.10.8-150400.9.10.1
`python-pydantic` SUSE:Linux Enterprise Module for Python 3 15 SP6	before 1.10.8-150400.9.10.1	1.10.8-150400.9.10.1
`python-pydantic` openSUSE:Leap 15.6	before 1.10.8-150400.9.10.1	1.10.8-150400.9.10.1
`pydantic` Ubuntu:Pro:20.04:LTS	before 1.2-1ubuntu0.1~esm3, plus listed versions 0.30.1-11.2-11.2-1ubuntu0.1~esm1	1.2-1ubuntu0.1~esm3
`pydantic` Ubuntu:Pro:22.04:LTS	before 1.8.2-1ubuntu0.1~esm1, plus listed versions 1.7.4-11.8.2-1	1.8.2-1ubuntu0.1~esm1
`python-pydantic` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 2.13.4-2.1	2.13.4-2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-3772 is a medium vulnerability (CVSS 5.9) in Pydantic, published April 15, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in pydantic 2.4.0.

References

Show 131 moreShow less

This page doesn't list everything

Left out here: 115 versions. The JSON record has them.