Skip to content
Pydantic Pydantic vulnerabilities
-
pydantic pydantic-ai-harness
Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code
CVE-2026-114386
Fix available
6.3 Medium
-
pydantic pydantic-ai, pydantic-ai-slim, ai +2 more
`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution
CVE-2026-107295
Fix available
7.6 High
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
CVE-2026-107294
Fix available
6.5 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`
CVE-2026-107293
Fix available
2.3 Low
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header
CVE-2026-107292
Fix available
6.4 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
CVE-2026-107291
Fix available
2.3 Low
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
CVE-2026-107290
Fix available
6.5 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)
CVE-2026-107289
Fix available
6.8 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently
CVE-2026-107288
3.7 Low
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
CVE-2026-107287
Fix available
6.5 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
CVE-2026-107286
Fix available
7.5 High
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection
CVE-2026-54249
Fix available
6.8 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages`
CVE-2026-65975
6.5 Medium
-
pydantic pydantic-settings
NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
CVE-2026-58203
Fix available
5.3 Medium
-
pydantic pydantic-ai, ai, pydantic-ai-slim +2 more
pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
CVE-2026-48782
Fix available
6.8 Medium
-
pydantic ai, pydantic-ai, pydantic-ai-slim +2 more
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
CVE-2026-46678
Fix available
6.8 Medium
-
pydantic ai, pydantic-ai, red hat enterprise linux ai (rhel ai) 3 +2 more
Pydantic AI affected by Stored XSS via Path Traversal in Web UI CDN URL
CVE-2026-25640
Fix available
7.1 High
-
pydantic ai, pydantic-ai, red hat enterprise linux ai (rhel ai) 3 +2 more
Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling
CVE-2026-25580
Fix available
8.6 High
-
pydantic, fedoraproject fedora +1 more
Regular expression denial of service in Pydantic < 2.4.0
CVE-2024-3772
Fix available
5.9 Medium
-
pydantic, fedoraproject fedora +1 more
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
CVE-2021-29510
Fix available
3.3 Low