Advisories · Technology
pydantic-ai.
Every CVE that names pydantic-ai among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently
- pydantic-ai
- pydantic-ai-slim
- Server-side request forgery (SSRF)
- CWE-1289
- CVSS 6.5 Medium
Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages`
- pydantic-ai
- pydantic-ai-slim
- Broken access control