Skip to content
OpenAdvisories

Package · PyPI

pydantic-ai

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.6
    CVE-2026-107295

    `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to_web() and clai web development chat endpoint has missing request content-type validation. A website visited …

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • High 7.5
    CVE-2026-107286

    Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel or limit_model_concurrency can retain shared concurrency slots because anyio.C…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • High 8.6
    CVE-2026-25580

    Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept me…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • High 7.1
    CVE-2026-25640

    Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to before 1.51.0, a path traversal vulnerability in the Pydantic AI web UI allows an attacker to serve arbitrary JavaScript in the context of the a…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI