Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

25 records

Vendor: pydantic Clear all filters
TI-2026-78767 CVE-2026-114386 · GHSA-3589-pxp7-3gj8

Tool call limit bypass in Pydantic AI CodeMode run_code

Priority LOW 28

Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00346 Published 2026-10-21 Fixed in 0.59.0 CWE-770
TI-2026-69610 CVE-2026-107295 · GHSA-h4xc-3qfq-jf93

Cross-site requests run agent tools in pydantic-ai web chat

Priority LOW 32

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00158 Published 2026-10-08 Partial fix · 1.107.4, 2.28.0 CWE-352
TI-2026-69601 CVE-2026-107293 · GHSA-3gh4-cghq-f8v4

Retry prompts leak into Pydantic AI OpenTelemetry telemetry

Priority LOW 12

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00297 Published 2026-10-08 Partial fix · 1.107.4, 2.27.1 CWE-212
TI-2026-69634 CVE-2026-107288

Blocked domain bypass in Pydantic AI web_fetch_tool

Priority LOW 18

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00368 Published 2026-10-08 Partial fix · 1.107.6, 2.44.0 CWE-1289
TI-2026-39151 CVE-2026-54249 · GHSA-h7p7-w5gc-xj3w

Server-side request forgery in pydantic-ai

Priority LOW 30

Pydantic AI is a Python agent framework for building Generative AI applications.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00315 Published 2026-07-29 Fixed in 1.106.0, 2.0.0b6 CWE-918
TI-2026-46990 CVE-2026-65975

Incorrect authorization in pydantic-ai

Priority LOW 35

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00329 Published 2026-07-29 Partial fix · 1.107.1, 2.5.0 CWE-863
TI-2026-41916 CVE-2026-58203

Path traversal in pydantic-settings

Priority MEDIUM 57

pydantic-settings provides settings management using Pydantic.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00185 Published 2026-07-06 Partial fix · 2.14.2 CWE-22
TI-2026-36052 CVE-2026-48782 · GHSA-cg7w-rg45-pc59

Server-side request forgery in pydantic-ai

Priority LOW 30

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00401 Published 2026-06-16 Partial fix · 1.102.0, 2.0.0b3 CWE-918
TI-2024-03518 CVE-2024-3772 · GHSA-mr82-8j83-vxmv

Regular expression denial of service in Pydantic < 2.4.0

Priority HIGH 66

Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00957 Published 2024-04-15 Fixed in 2.4.0, 1.10.13 CWE-1333