v2.14.2
📦 pydantic-settingsView on GitHub →
🐛 1 fixes🔧 1 symbols
Summary
This is a security patch release addressing a symlink traversal vulnerability in NestedSecretsSettingsSource.
🐛 Bug Fixes
- Fixed a security vulnerability where NestedSecretsSettingsSource with secrets_nested_subdir=True could follow symbolic links outside secrets_dir, potentially reading out-of-tree files and bypassing size limits.