Vulnerabilities

All ecosystems 2184529 AlmaLinux 5857 Alpaquita 15521 Alpine 4589 Android 3674 Azure Linux 17131 BellSoft Hardened Containers 744 Bitnami 9212 Chainguard 1019853 CleanStart 3432 CRAN 14 crates.io 2710 Debian 67364 Echo 6542 GHC 3 GIT 106341 GitHub Actions 55 Go 9147 Hackage 32 Hex 351 Julia 1713 Linux 29368 Mageia 6200 Maven 6998 MinimOS 142708 npm 228482 NuGet 1860 opam 29 openEuler 8674 openSUSE 14332 OSS-Fuzz 4003 Packagist 7036 Pub 11 PyPI 25075 Red Hat 23028 Rocky Linux 4229 Root 19463 RubyGems 4709 SUSE 23039 SwiftURL 59 TuxCare 9208 Ubuntu 64326 VSCode 21 Wolfi 287386

GHSA-4xgf-cpjx-pc3j

PyPI/pydantic-settings

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size 19 Jun

Fix available
Severity - 5.3 (Medium)