pydantic

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

pydantic records in CISA KEV

No pydantic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pydantic Ai 16 records MEDIUM Pydantic 2 records HIGH Pydantic-settings 1 record MEDIUM

Records

16 records in Pydantic Ai · all components

TI-2026-20687 CVE-2026-25580 · GHSA-2jrp-274c-jhv3

Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

MEDIUM 44

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00649 Published 2026-02-06 Partial fix · 1.56.0 CWE-918

TI-2026-69551 CVE-2026-107286 · GHSA-6fqq-452j-qhrp

Pydantic AI keeps concurrency slots after streams end early

LOW 39

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0045 Published 2026-10-08 Partial fix · 2.53.0 CWE-772

TI-2026-46990 CVE-2026-65975

Incorrect authorization in pydantic-ai

LOW 35

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00329 Published 2026-07-29 Partial fix · 1.107.1, 2.5.0 CWE-863

TI-2026-69610 CVE-2026-107295 · GHSA-h4xc-3qfq-jf93

Cross-site requests run agent tools in pydantic-ai web chat

LOW 32

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00158 Published 2026-10-08 Partial fix · 1.107.4, 2.28.0 CWE-352

TI-2026-20740 CVE-2026-25640 · GHSA-wjp5-868j-wqv7

Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL

LOW 31

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00371 Published 2026-02-06 Partial fix · 1.51.0 CWE-22

TI-2026-69617 CVE-2026-107289 · GHSA-vmxc-h2x2-jmf3

Pydantic AI blocklist bypass via IPv6 zone identifier allows SSRF

LOW 30

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.0039 Published 2026-10-08 Partial fix · 1.107.6, 2.44.0 CWE-1289

TI-2026-39151 CVE-2026-54249 · GHSA-h7p7-w5gc-xj3w

Server-side request forgery in pydantic-ai

LOW 30

Pydantic AI is a Python agent framework for building Generative AI applications.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00315 Published 2026-07-29 Fixed in 1.106.0, 2.0.0b6 CWE-918

TI-2026-36052 CVE-2026-48782 · GHSA-cg7w-rg45-pc59

Server-side request forgery in pydantic-ai

LOW 30

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00401 Published 2026-06-16 Partial fix · 1.102.0, 2.0.0b3 CWE-918

TI-2026-34309 CVE-2026-46678 · GHSA-cqp8-fcvh-x7r3

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

LOW 30

Pydantic AI is a Python agent framework for building Generative AI applications.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.0038 Published 2026-07-29 Fixed in 1.99.0 CWE-918

TI-2026-69616 CVE-2026-107287 · GHSA-v36g-jcw9-x7cw

Excessive resource use in Pydantic AI HTML-to-Markdown web fetching

LOW 29

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00277 Published 2026-10-08 Partial fix · 1.107.7, 2.52.0 CWE-400

TI-2026-69615 CVE-2026-107294 · GHSA-v2xh-2vp8-57h8

Unbounded memory use in Pydantic AI web fetch and file URL downloads

LOW 29

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00437 Published 2026-10-08 Partial fix · 1.107.2, 2.24.0 CWE-400

TI-2026-69608 CVE-2026-107290 · GHSA-fpf4-vwcp-v4hp

Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch

LOW 29

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00512 Published 2026-10-08 Partial fix · 1.107.6, 2.44.0 CWE-1333

TI-2026-69612 CVE-2026-107292 · GHSA-q2xc-rrxj-58x9

DNS rebinding in Pydantic AI web chat lets sites reach local agents

LOW 27

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00132 Published 2026-10-08 Partial fix · 2.30.0, 1.107.5 CWE-346

TI-2026-69634 CVE-2026-107288

Blocked domain bypass in Pydantic AI web_fetch_tool

LOW 18

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00368 Published 2026-10-08 Partial fix · 1.107.6, 2.44.0 CWE-1289

TI-2026-69602 CVE-2026-107291 · GHSA-4x9p-g9wm-8q7f

Pydantic AI telemetry leaks content when include_content=False

LOW 13

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00622 Published 2026-10-08 Partial fix · 1.107.6, 2.44.0 CWE-212

TI-2026-69601 CVE-2026-107293 · GHSA-3gh4-cghq-f8v4

Retry prompts leak into Pydantic AI OpenTelemetry telemetry

LOW 12

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00297 Published 2026-10-08 Partial fix · 1.107.4, 2.27.1 CWE-212

Open these records in search →

Critical	0
High	8
Medium	14
Low	3
No CVSS	0