TI-2026-69610 CVE-2026-107295 · GHSA-h4xc-3qfq-jf93
Cross-site requests run agent tools in pydantic-ai web chat
Priority LOW 32
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
Vulnerabilities
16 records
TI-2026-69615 CVE-2026-107294 · GHSA-v2xh-2vp8-57h8
Unbounded memory use in Pydantic AI web fetch and file URL downloads
Priority LOW 29
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69601 CVE-2026-107293 · GHSA-3gh4-cghq-f8v4
Retry prompts leak into Pydantic AI OpenTelemetry telemetry
Priority LOW 12
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69612 CVE-2026-107292 · GHSA-q2xc-rrxj-58x9
DNS rebinding in Pydantic AI web chat lets sites reach local agents
Priority LOW 27
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69602 CVE-2026-107291 · GHSA-4x9p-g9wm-8q7f
Pydantic AI telemetry leaks content when include_content=False
Priority LOW 13
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69608 CVE-2026-107290 · GHSA-fpf4-vwcp-v4hp
Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch
Priority LOW 29
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69617 CVE-2026-107289 · GHSA-vmxc-h2x2-jmf3
Pydantic AI blocklist bypass via IPv6 zone identifier allows SSRF
Priority LOW 30
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69634 CVE-2026-107288
Blocked domain bypass in Pydantic AI web_fetch_tool
Priority LOW 18
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69616 CVE-2026-107287 · GHSA-v36g-jcw9-x7cw
Excessive resource use in Pydantic AI HTML-to-Markdown web fetching
Priority LOW 29
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-69551 CVE-2026-107286 · GHSA-6fqq-452j-qhrp
Pydantic AI keeps concurrency slots after streams end early
Priority LOW 39
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-39151 CVE-2026-54249 · GHSA-h7p7-w5gc-xj3w
Server-side request forgery in pydantic-ai
Priority LOW 30
Pydantic AI is a Python agent framework for building Generative AI applications.
TI-2026-34309 CVE-2026-46678 · GHSA-cqp8-fcvh-x7r3
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
Priority LOW 30
Pydantic AI is a Python agent framework for building Generative AI applications.
TI-2026-46990 CVE-2026-65975
Incorrect authorization in pydantic-ai
Priority LOW 35
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-36052 CVE-2026-48782 · GHSA-cg7w-rg45-pc59
Server-side request forgery in pydantic-ai
Priority LOW 30
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-20687 CVE-2026-25580 · GHSA-2jrp-274c-jhv3
Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling
Priority MEDIUM 44
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.
TI-2026-20740 CVE-2026-25640 · GHSA-wjp5-868j-wqv7
Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL
Priority LOW 31
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.