PY
Product
pydantic-ai
16
CVEs
0
On KEV
8.6
Max CVSS
10
New 30D
Severity mix
Critical 0High 3Medium 12Low 1
Watch
Add pydantic-ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25580 | 8.6 | Feb 6 | Pydantic AI Affected by Server-Side Request Forgery (SSRF) in URL Download Handling Affected: >= 0.0.26, < 1.56.0 |
| CVE-2026-107295 | 7.6 | Oct 8 | `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution Affected: >= 1.34.0, < 1.107.4; >= 2.0.0b1, < 2.28.0 |
| CVE-2026-107286 | 7.5 | Oct 8 | Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early Affected: >= 2.10.0, < 2.53.0 |
Showing 3