Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pydantic security vulnerability CVE-2021-29510 #496

Closed
Kludex opened this issue May 12, 2021 · 0 comments · Fixed by #499
Closed

Pydantic security vulnerability CVE-2021-29510 #496

Kludex opened this issue May 12, 2021 · 0 comments · Fixed by #499
Labels
install Installation and compilation

Comments

@Kludex
Copy link
Contributor

Kludex commented May 12, 2021

Hi there 👋

I'm not sure if this is important for thinc, but I'll mention just in case. Feel free to close it. 😅

Pydantic published a security vulnerability yesterday, which you can check it here.

The way that was handled on FastAPI is to not allow versions that are different from the ones with the security patch, as you can see here.

I guess this is relevant as we don't want to allow a Pydantic version with this security vulnerability as requirement. 😗

@adrianeboyd adrianeboyd linked a pull request May 18, 2021 that will close this issue
@svlandeg svlandeg added the install Installation and compilation label May 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
install Installation and compilation
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants