Detections
Analytics
SCA: security update for pydantic-settings (GHSA-4xgf-cpjx-pc3j)
high Tenable Self-Hosted Container Security Plugin ID 443717
Description
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_sizeSolution
Update the pydantic-settings library and its related packages to version 2.14.2 or later.See Also
Plugin Details
Severity: High
ID: 443717
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 6/20/2026
Updated: 6/20/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 6/19/2026
Vulnerability Publication Date: 6/19/2026