Pydantic — Vulnerabilities & Security Advisories 23

Pydantic serves as a data validation library using Python type annotations to enforce data structures, primarily used in API development and configuration management. Historically, vulnerabilities have included remote code execution through unsafe deserialization and cross-site scripting from improper input sanitization. The library has faced security issues related to privilege escalation in versions prior to 1.9 due to path traversal flaws. While maintaining three CVEs, Pydantic's security posture has improved with stricter validation defaults and regular security audits, making it a generally secure choice when properly configured and updated.