Skip to content
OpenAdvisories

Package · PyPI

pydantic-ai

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-107294

    Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallback, and remote FileUrl media downloads buffer the complete HTTP response body be…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai-slim PyPI
  • Medium 6.4
    CVE-2026-107292

    Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.to_web() and clai web development chat server does not validate the Host header, allowing a website visited by a developer …

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai-slim PyPI
  • Medium 6.5
    CVE-2026-107290

    Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extract…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • Medium 6.8
    CVE-2026-107289

    Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced URLs into local network access through FileUrl with force_download='allow-local…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • Medium 6.5
    CVE-2026-107287

    Pydantic AI: Excessive resource use when local web fetching converts nested HTML

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local web_fetch_tool and the WebFetch local fallback can consume excessive CPU and memory during HTML-to-Markdown con…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai-slim PyPI
  • Medium 6.8
    CVE-2026-54249

    VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection

    Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that submits message history to a Pydantic AI UI adapter (such as the Vercel AI adapter) can reference a…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • Medium 6.8
    CVE-2026-46678

    Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

    Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into force_download='allow-local' (disabling the default block on private/internal IPs), the cloud-metadata bloc…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai-slim PyPI
  • Medium 6.8
    CVE-2026-48782

    pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.56.0 through 1.101.0, 2.0.0b1, and 2.0.0b2, the cloud-metadata blocklist could be bypassed by encoding the metadata IP in an IPv6 transition form…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI