Skip to content

CVE-2024-3772 pydantic affected_range may be missing a comma

Gemnasium is mistakenly reporting pydantic:2.7.0 as being vulnerable to CVE-2024-3722 even though the affected_range is set to ">=2.0.0 <2.4.0||<1.10.13". Looking at other examples, I wonder if the affected_range shouldn't actually be ">=2.0.0,<2.4.0||<1.10.13"?