{"schema_version":1,"title":"Pydantic AI vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Pydantic AI: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-107286, was published on 8 October 2026. Nothing in the last four weeks, down from 9 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/pydantic-pydantic-ai","json_url":"https://junglewise.ai/threats/technologies/pydantic-pydantic-ai.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/pydantic-pydantic-ai","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":2,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":9,"last_365_days":9},"latest":[{"cve":"CVE-2026-107286","cvss":7.5,"epss":0.0045,"slug":"cve-2026-107286-pydantic-ai-concurrency-limited-models-can-keep-their-slot-when","title":"Pydantic AI concurrency slot leak in streamed requests","severity":"high","exploited":false,"published_at":"2026-10-08T19:42:55+00:00","url":"https://junglewise.ai/threats/cve-2026-107286-pydantic-ai-concurrency-limited-models-can-keep-their-slot-when"},{"cve":"CVE-2026-107287","cvss":6.5,"epss":0.0028,"slug":"cve-2026-107287-pydantic-ai-excessive-resource-use-when-local-web-fetching","title":"Pydantic AI excessive resource consumption in HTML-to-Markdown conversion","severity":"medium","exploited":false,"published_at":"2026-10-08T17:40:50+00:00","url":"https://junglewise.ai/threats/cve-2026-107287-pydantic-ai-excessive-resource-use-when-local-web-fetching"},{"cve":"CVE-2026-107292","cvss":6.4,"epss":0.0013,"slug":"cve-2026-107292-pydantic-ai-web-chat-ui-agent-to-web-clai-web-the-local-chat","title":"Pydantic AI web chat UI Host header validation bypass","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:39+00:00","url":"https://junglewise.ai/threats/cve-2026-107292-pydantic-ai-web-chat-ui-agent-to-web-clai-web-the-local-chat"},{"cve":"CVE-2026-107295","cvss":7.6,"epss":0.0016,"slug":"cve-2026-107295-pydantic-ai-web-chat-ui-agent-to-web-clai-web-a-website-visited","title":"Pydantic AI missing content-type validation in chat endpoint","severity":"high","exploited":false,"published_at":"2026-10-08T17:16:36+00:00","url":"https://junglewise.ai/threats/cve-2026-107295-pydantic-ai-web-chat-ui-agent-to-web-clai-web-a-website-visited"},{"cve":"CVE-2026-107293","cvss":4,"epss":0.003,"slug":"cve-2026-107293-pydantic-ai-opentelemetry-instrumentation-retry-prompt-content","title":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:32+00:00","url":"https://junglewise.ai/threats/cve-2026-107293-pydantic-ai-opentelemetry-instrumentation-retry-prompt-content"},{"cve":"CVE-2026-107294","cvss":6.5,"epss":0.0044,"slug":"cve-2026-107294-pydantic-ai-unbounded-memory-use-when-downloading-remote-content","title":"Pydantic AI unbounded memory use in remote content download","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:28+00:00","url":"https://junglewise.ai/threats/cve-2026-107294-pydantic-ai-unbounded-memory-use-when-downloading-remote-content"},{"cve":"CVE-2026-107290","cvss":6.5,"epss":0.0044,"slug":"cve-2026-107290-pydantic-ai-event-loop-blocked-by-quadratic-title-extraction-in","title":"Pydantic AI event loop blocking in web_fetch title extraction","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:25+00:00","url":"https://junglewise.ai/threats/cve-2026-107290-pydantic-ai-event-loop-blocked-by-quadratic-title-extraction-in"},{"cve":"CVE-2026-107291","cvss":4,"epss":0.0052,"slug":"cve-2026-107291-pydantic-ai-opentelemetry-instrumentation-exception-events-on","title":"Pydantic AI OpenTelemetry instrumentation content disclosure with include_content=False","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:16+00:00","url":"https://junglewise.ai/threats/cve-2026-107291-pydantic-ai-opentelemetry-instrumentation-exception-events-on"},{"cve":"CVE-2026-107289","cvss":6.8,"epss":0.0032,"slug":"cve-2026-107289-pydantic-ai-ssrf-cloud-metadata-blocklist-bypass-via-ipv6-zone","title":"Pydantic AI SSRF in cloud-metadata blocklist bypass via IPv6 zone identifiers","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:06+00:00","url":"https://junglewise.ai/threats/cve-2026-107289-pydantic-ai-ssrf-cloud-metadata-blocklist-bypass-via-ipv6-zone"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Pydantic AI Slim","slug":"ai-slim","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/ai-slim"},{"name":"PydanticAI","slug":"pydanticai","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/pydanticai"}],"technology":{"hub":true,"name":"Pydantic AI","slug":"pydantic-pydantic-ai","vendor":{"hub":true,"name":"Pydantic","slug":"pydantic","url":"https://junglewise.ai/threats/vendors/pydantic"},"aliases":[],"category":"library","description":"Python library for building AI agents with type-safe tool calling and structured outputs.","url":"https://junglewise.ai/threats/technologies/pydantic-pydantic-ai"},"most_severe":[{"cve":"CVE-2026-107295","cvss":7.6,"epss":0.0016,"slug":"cve-2026-107295-pydantic-ai-web-chat-ui-agent-to-web-clai-web-a-website-visited","title":"Pydantic AI missing content-type validation in chat endpoint","severity":"high","exploited":false,"published_at":"2026-10-08T17:16:36+00:00","url":"https://junglewise.ai/threats/cve-2026-107295-pydantic-ai-web-chat-ui-agent-to-web-clai-web-a-website-visited"},{"cve":"CVE-2026-107286","cvss":7.5,"epss":0.0045,"slug":"cve-2026-107286-pydantic-ai-concurrency-limited-models-can-keep-their-slot-when","title":"Pydantic AI concurrency slot leak in streamed requests","severity":"high","exploited":false,"published_at":"2026-10-08T19:42:55+00:00","url":"https://junglewise.ai/threats/cve-2026-107286-pydantic-ai-concurrency-limited-models-can-keep-their-slot-when"},{"cve":"CVE-2026-107289","cvss":6.8,"epss":0.0032,"slug":"cve-2026-107289-pydantic-ai-ssrf-cloud-metadata-blocklist-bypass-via-ipv6-zone","title":"Pydantic AI SSRF in cloud-metadata blocklist bypass via IPv6 zone identifiers","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:06+00:00","url":"https://junglewise.ai/threats/cve-2026-107289-pydantic-ai-ssrf-cloud-metadata-blocklist-bypass-via-ipv6-zone"},{"cve":"CVE-2026-107294","cvss":6.5,"epss":0.0044,"slug":"cve-2026-107294-pydantic-ai-unbounded-memory-use-when-downloading-remote-content","title":"Pydantic AI unbounded memory use in remote content download","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:28+00:00","url":"https://junglewise.ai/threats/cve-2026-107294-pydantic-ai-unbounded-memory-use-when-downloading-remote-content"},{"cve":"CVE-2026-107290","cvss":6.5,"epss":0.0044,"slug":"cve-2026-107290-pydantic-ai-event-loop-blocked-by-quadratic-title-extraction-in","title":"Pydantic AI event loop blocking in web_fetch title extraction","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:25+00:00","url":"https://junglewise.ai/threats/cve-2026-107290-pydantic-ai-event-loop-blocked-by-quadratic-title-extraction-in"},{"cve":"CVE-2026-107287","cvss":6.5,"epss":0.0028,"slug":"cve-2026-107287-pydantic-ai-excessive-resource-use-when-local-web-fetching","title":"Pydantic AI excessive resource consumption in HTML-to-Markdown conversion","severity":"medium","exploited":false,"published_at":"2026-10-08T17:40:50+00:00","url":"https://junglewise.ai/threats/cve-2026-107287-pydantic-ai-excessive-resource-use-when-local-web-fetching"},{"cve":"CVE-2026-107292","cvss":6.4,"epss":0.0013,"slug":"cve-2026-107292-pydantic-ai-web-chat-ui-agent-to-web-clai-web-the-local-chat","title":"Pydantic AI web chat UI Host header validation bypass","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:39+00:00","url":"https://junglewise.ai/threats/cve-2026-107292-pydantic-ai-web-chat-ui-agent-to-web-clai-web-the-local-chat"},{"cve":"CVE-2026-107291","cvss":4,"epss":0.0052,"slug":"cve-2026-107291-pydantic-ai-opentelemetry-instrumentation-exception-events-on","title":"Pydantic AI OpenTelemetry instrumentation content disclosure with include_content=False","severity":"medium","exploited":false,"published_at":"2026-10-08T16:48:16+00:00","url":"https://junglewise.ai/threats/cve-2026-107291-pydantic-ai-opentelemetry-instrumentation-exception-events-on"},{"cve":"CVE-2026-107293","cvss":4,"epss":0.003,"slug":"cve-2026-107293-pydantic-ai-opentelemetry-instrumentation-retry-prompt-content","title":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`","severity":"medium","exploited":false,"published_at":"2026-10-08T17:16:32+00:00","url":"https://junglewise.ai/threats/cve-2026-107293-pydantic-ai-opentelemetry-instrumentation-retry-prompt-content"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}