Pydantic vulnerabilities
We track 5 vulnerabilities in Pydantic products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
Latest Pydantic vulnerabilities
- 7.6 High severity
pydantic-ai: Cross-Site Request Forgery
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to_web() and clai web development chat endpoint has missing request content-type validation. A website visited b
- 7.5 High severity
pydantic-ai: Missing Release of Resource after Effective Lifetime
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel or limit_model_concurrency can retain shared concurrency slots because anyio.Ca
- 7.5 High severity
httpx2: Improper Handling of Highly Compressed Data (Data Amplification)
HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iter_bytes() or aiter_bytes() yields bounded pieces to the app
- 8.1 High severity
httpx2: Cleartext Transmission of Sensitive Information
HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because t
- 8.6 High severity
pydantic-ai: Server-Side Request Forgery
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery (SSRF) vulnerability exists in Pydantic AI's URL download functionality. When applications accept mes