GCVE-110-MAGEIA-2026-260

Advisory Published

Vulnetix · Advisory published July 18, 2026

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size. (CVE-2026-58203)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-pydantic-settings	0 (affected), 2.14.2-1.mga10 (unaffected)	—

References

Updated python-pydantic-settings packages fix a security vulnerability

advisory

Updated python-pydantic-settings packages fix a security vulnerability

issue

Updated python-pydantic-settings packages fix a security vulnerability

url

Updated python-pydantic-settings packages fix a security vulnerability

advisory

Browse GCVE Records

867 records in the GCVE database · Updated September 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON