CVE-2021-29510

CVE-2021-29510 describes a denial-of-service vulnerability in Pydantic, a Python data validation library, affecting versions prior to 1.8.2, 1.7.4, and 1.6.2. Passing string representations of infinity (e.g., 'infinity', 'inf') or float('inf') to datetime or date fields causes infinite validation loops and 100% CPU utilization on one core. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-exploitable attack with low complexity and high availability impact, but no confidentiality or integrity impact. There is no evidence of active exploitation, and no public exploit code or Metasploit modules are available, though it has garnered some community discussion and media coverage.