Pydantic

Products

Exploited and recent CVEs

• CVE-2026-114386 Medium 4.8 Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code 0.3%
• CVE-2026-107295 High 7.6 `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution 0.2%
• CVE-2026-107295 High 7.6 `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution 0.2%
• CVE-2026-107294 Medium 6.5 Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl 0.4%
• CVE-2026-107294 Medium 6.5 Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl 0.4%
• CVE-2026-107293 Low 2.3 Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False` 0.3%
• CVE-2026-107293 Low 2.3 Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False` 0.3%
• CVE-2026-107292 Medium 6.4 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header 0.1%
• CVE-2026-107292 Medium 6.4 Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header 0.1%
• CVE-2026-107291 Low 2.3 Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False` 0.6%
• CVE-2026-107291 Low 2.3 Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False` 0.6%
• CVE-2026-107290 Medium 6.5 Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch` 0.5%
• CVE-2026-107290 Medium 6.5 Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch` 0.5%
• CVE-2026-107289 Medium 6.8 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782) 0.4%
• CVE-2026-107289 Medium 6.8 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782) 0.4%
• CVE-2026-107288 Low 3.7 Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently 0.4%
• CVE-2026-107288 Low 3.7 Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently 0.4%
• CVE-2026-107287 Medium 6.5 Pydantic AI: Excessive resource use when local web fetching converts nested HTML 0.3%
• CVE-2026-107287 Medium 6.5 Pydantic AI: Excessive resource use when local web fetching converts nested HTML 0.3%
• CVE-2026-107286 High 7.5 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early 0.4%
• CVE-2026-107286 High 7.5 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early 0.4%
• CVE-2026-84382 High 7.5 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) 0.6%
• CVE-2026-84381 High 8.1 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies <0.1%
• CVE-2026-84381 High 8.1 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies <0.1%
• CVE-2026-84380 Medium 5.6 HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated 0.2%
• CVE-2026-84379 Medium 5.3 HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers 0.3%
• CVE-2026-84378 Medium 5.9 HTTPX2: Quadratic SSE line buffering can cause CPU denial of service 0.3%
• CVE-2026-54249 Medium 6.8 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection 0.3%
• CVE-2026-54249 Medium 6.8 VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection 0.3%
• CVE-2026-46678 Medium 6.8 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) 0.4%