VDB
Sign up

package

PyPI/pydantic-settings

pkg:pypi/pydantic-settings

MEDIUM5.3PyPI
GHSA-4xgf-cpjx-pc3j· CVE-2026-58203

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Modified: 9/10/2026