[ Vendor · 11 CVEs ]
pydantic
CVEs affecting pydantic published in the last 30 days, plus any pydantic CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114386 | 21 Oct 2026 | CVSS 4.8 | pydantic-ai-harnessPydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode… | |
| CVE-2026-107294 | 8 Oct 2026 | CVSS 6.5 | Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0… | Fix |
| CVE-2026-107295 | 8 Oct 2026 | CVSS 7.6 | Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the… | Fix |
| CVE-2026-107290 | 8 Oct 2026 | CVSS 6.5 | Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local… | Fix |
| CVE-2026-107291 | 8 Oct 2026 | CVSS 4.3 | Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0… | Fix |
| CVE-2026-107292 | 8 Oct 2026 | CVSS 6.4 | Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` headerPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.to_web() and… | Fix |
| CVE-2026-107293 | 8 Oct 2026 | CVSS 5.3 | Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1… | Fix |
| CVE-2026-107288 | 8 Oct 2026 | CVSS 3.7 | pydantic-aiPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local… | Fix |
| CVE-2026-107289 | 8 Oct 2026 | CVSS 6.8 | Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiersPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0… | Fix |
| CVE-2026-107287 | 8 Oct 2026 | CVSS 6.5 | Pydantic AI: Excessive resource use when local web fetching converts nested HTMLPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local… | Fix |
| CVE-2026-107286 | 8 Oct 2026 | CVSS 7.5 | Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends earlyPydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made… | Fix |