pydantic vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 202623

Newest CVEs

• CVE-2026-114386

  Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code

  pydantic · pydantic-ai-harness

  Medium6.3
• CVE-2026-107295

  `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution

  pydantic · pydantic-ai

  High7.6
• CVE-2026-107294

  Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl

  pydantic · pydantic-ai

  Medium6.5
• CVE-2026-107293

  Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-107292

  Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

  pydantic · pydantic-ai

  Medium6.4
• CVE-2026-107291

  Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-107290

  Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`

  pydantic · pydantic-ai

  Medium6.5
• CVE-2026-107289

  Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)

  pydantic · pydantic-ai

  Medium6.8
• CVE-2026-107288

  Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently

  pydantic · pydantic-ai

  Low3.7
• CVE-2026-107287

  Pydantic AI: Excessive resource use when local web fetching converts nested HTML

  pydantic · pydantic-ai

  Medium6.5