Skip to content
OpenAdvisories

Vendor

pydantic

24 known vulnerabilities.

Products

pydantic-ai 16 pydantic-ai-slim 14 httpx2 5 Pydantic 1 pydantic-ai-harness 1 pydantic-settings 1 httpcore2 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-107293

    Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can export retry prompts outs…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai-slim PyPI
  • Low 2.3
    CVE-2026-107291

    Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive ag…

    pydantic pydantic-ai pydantic-ai-slim pydantic-ai PyPI
  • Low 3.7
    CVE-2026-107288

    Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently

    Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both …

    pydantic pydantic-ai pydantic-ai-slim