PY
Vendor
pydantic
40
CVEs
0
On KEV
21
New 30D
Products
PY8.6
pydantic-ai
pydantic
16 CVEs0 on KEV10 new
PY7.6
pydantic-ai-slim
pydantic
14 CVEs0 on KEV10 new
PY4.8
pydantic-ai-harness
pydantic
1 CVEs0 on KEV1 new
HT8.1
httpx2
pydantic
5 CVEs0 on KEV0 new
PY7.5
Pydantic
Pydantic
2 CVEs0 on KEV0 new
HT8.1
httpcore2
pydantic
1 CVEs0 on KEV0 new
PY5.3
pydantic-settings
pydantic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114386 | PY pydantic-ai-harness pydantic | 4.8 | Oct 21 | Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_code |
| CVE-2026-107295 | PY pydantic-ai pydantic | 7.6 | Oct 8 | `pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution |
| CVE-2026-107294 | PY pydantic-ai-slim pydantic | 6.5 | Oct 8 | Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl |
| CVE-2026-107293 | PY pydantic-ai pydantic | 5.3 | Oct 8 | Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False` |
| CVE-2026-107292 | PY pydantic-ai-slim pydantic | 6.4 | Oct 8 | Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header |
| CVE-2026-107291 | PY pydantic-ai pydantic | 4.3 | Oct 8 | Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False` |
| CVE-2026-107290 | PY pydantic-ai-slim pydantic | 6.5 | Oct 8 | Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch` |
| CVE-2026-107289 | PY pydantic-ai-slim pydantic | 6.8 | Oct 8 | Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782) |
| CVE-2026-107288 | PY pydantic-ai pydantic | 3.7 | Oct 8 | Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently |
| CVE-2026-107287 | PY pydantic-ai-slim pydantic | 6.5 | Oct 8 | Pydantic AI: Excessive resource use when local web fetching converts nested HTML |
| CVE-2026-107286 | PY pydantic-ai-slim pydantic | 7.5 | Oct 8 | Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early |
| CVE-2026-84382 | HT httpx2 pydantic | 7.5 | Sep 2 | HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) |
| CVE-2026-84381 | HT httpcore2 pydantic | 8.1 | Sep 2 | HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies |
| CVE-2026-84380 | HT httpx2 pydantic | 5.6 | Sep 2 | HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated |
| CVE-2026-84379 | HT httpx2 pydantic | 5.3 | Sep 2 | HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers |
| CVE-2026-84378 | HT httpx2 pydantic | 5.9 | Sep 2 | HTTPX2: Quadratic SSE line buffering can cause CPU denial of service |
| CVE-2026-54249 | PY pydantic-ai-slim pydantic | 6.8 | Jul 29 | VercelAIAdapter trusts client-controlled `providerMetadata` to construct `UploadedFile` — S3/GCS confused deputy via provider metadata injection |
| CVE-2026-46678 | PY pydantic-ai pydantic | 5.9 | Jul 29 | Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) |
| CVE-2026-65975 | PY pydantic-ai-slim pydantic | 6.5 | Jul 29 | Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages` |
| CVE-2026-58203 | PY pydantic-settings pydantic | 5.3 | Jul 6 | NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size |
| CVE-2026-48782 | PY pydantic-ai pydantic | 6.8 | Jun 16 | pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678) |
| CVE-2026-25580 | PA Pydantic AI Pydantic | 8.6 | Feb 6 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI |
| CVE-2026-25640 | PA Pydantic AI Pydantic | 5.4 | Feb 6 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI |
| CVE-2024-3772 | PY Pydantic Pydantic | 7.5 | Apr 15 | Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string |
| CVE-2021-29510 | PY Pydantic Pydantic | 7.5 | May 13 | Pydantic is a data validation and settings management using Python type hinting |