PyPI/pydantic-ai-slim CVE-2026-48782: medium 6.8, EPSS 0.42%
pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
Action: Upgrade pydantic-ai-slim to 1.102.0 or later.
pip install pydantic-ai-slim==1.102.0pip install pydantic-ai-slim==2.0.0b3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.56.0 | 1.102.0 | - |
| 2.0.0b1 | 2.0.0b3 | - |
Fixed versions
| 1.102.0 | 2.0.0b3 |
Sources
- osv: PYSEC-2026-2981
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-cg7w-rg45-pc59
- https://nvd.nist.gov/vuln/detail/CVE-2026-48782
- https://github.com/pydantic/pydantic-ai/pull/5596
- https://github.com/pydantic/pydantic-ai/commit/1add06179ba4de259f7ab977620b697b7209f7e4
- https://github.com/pydantic/pydantic-ai
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.102.0
- https://pypi.org/project/pydantic-ai-slim
- https://github.com/advisories/GHSA-cg7w-rg45-pc59
CVE-2026-48782 · published · modified · JSON