P
Vendor security profile
pydantic
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical0
CISA KEV0
Public exploit2
Patch rate%18
Avg. CVSS6.0
12-month vulnerability rate
0
0
0
2
0
0
0
1
4
0
0
10
CVE KEV
CVE severity distribution
17toplam CVE
High3 (18%)
Medium11 (65%)
Low3 (18%)
Patch and exploitation view
%18
Verified patch
%0
CISA KEV
%12
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
7.6
CVE-2026-107295
`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution
P
Patch status unknownEPSS %0
6.5
CVE-2026-107294
Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
P
Patch status unknownEPSS %0
2.3
CVE-2026-107293
Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`
P
Patch status unknownEPSS %0
6.4
CVE-2026-107292
Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header
P
Patch status unknownEPSS %0
2.3
CVE-2026-107291
Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
P
Patch status unknownEPSS %0
6.5
CVE-2026-107290
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
P
Patch status unknownEPSS %0
6.8
CVE-2026-107289
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)
P
Patch status unknownEPSS %0
3.7
CVE-2026-107288
Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently
P
Patch status unknownEPSS %0
6.5
CVE-2026-107287
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
P
Patch status unknownEPSS %0
7.5
CVE-2026-107286
Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
P
Patch status unknownEPSS %0