Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3692
  • PyPI/pydantic-ai
 Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials 19 Aug
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-3693
  • PyPI/pydantic-ai-slim
 Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials 19 Aug
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-h7p7-w5gc-xj3w
  • PyPI/pydantic-ai
  • PyPI/pydantic-ai-slim
 Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials 13 Aug
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2977
  • PyPI/pydantic-ai
 pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678) 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2981
  • PyPI/pydantic-ai-slim
 pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678) 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2982
  • PyPI/pydantic-ai-slim
 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2978
  • PyPI/pydantic-ai
 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2983
  • PyPI/pydantic-ai-slim
 Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL 13 Jul
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-2979
  • PyPI/pydantic-ai
 Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL 13 Jul
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-2980
  • PyPI/pydantic-ai-slim
 Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-2976
  • PyPI/pydantic-ai
 Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-1812
  • PyPI/pydantic
 Pydantic regular expression denial of service 07 Jul
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-cg7w-rg45-pc59
  • PyPI/pydantic-ai
  • PyPI/pydantic-ai-slim
 pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678) 26 Jun
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-4xgf-cpjx-pc3j
  • PyPI/pydantic-settings
 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size 19 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-cqp8-fcvh-x7r3
  • PyPI/pydantic-ai
  • PyPI/pydantic-ai-slim
 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580) 21 May
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-wjp5-868j-wqv7
  • PyPI/pydantic-ai
  • PyPI/pydantic-ai-slim
 Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL 06 Feb
  • Fix available
  • Severity - 7.1 (High)
Load more...