CVE-2026-107287
4 advisories.
PyPI/pydantic-ai CVE-2026-107287: medium 6.5, EPSS 0.28%
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Action: Upgrade pydantic-ai to 1.107.7 or later.
pip install pydantic-ai==1.107.7pip install pydantic-ai==2.52.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.77.0 | 1.107.7 | - |
| 2.0.0b1 | 2.52.0 | - |
Fixed versions
| 1.107.7 | 2.52.0 |
Sources
- osv: GHSA-v36g-jcw9-x7cw
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw
- https://github.com/pydantic/pydantic-ai/pull/8984
- https://github.com/pydantic/pydantic-ai/pull/8985
- https://github.com/pydantic/pydantic-ai/commit/2b247add4950bef61d352e7ca8aefbd20539180c
- https://github.com/pydantic/pydantic-ai/commit/2fd38792693da00a3ca5412aeffb436787af3545
- https://github.com/pydantic/pydantic-ai
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.7
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.52.0
CVE-2026-107287 · published · modified · JSON
PyPI/pydantic-ai-slim CVE-2026-107287: medium 6.5, EPSS 0.28%
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Action: Upgrade pydantic-ai-slim to 1.107.7 or later.
pip install pydantic-ai-slim==1.107.7pip install pydantic-ai-slim==2.52.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.77.0 | 1.107.7 | - |
| 2.0.0b1 | 2.52.0 | - |
Fixed versions
| 1.107.7 | 2.52.0 |
Sources
- osv: GHSA-v36g-jcw9-x7cw#PyPI/pydantic-ai-slim
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw
- https://github.com/pydantic/pydantic-ai/pull/8984
- https://github.com/pydantic/pydantic-ai/pull/8985
- https://github.com/pydantic/pydantic-ai/commit/2b247add4950bef61d352e7ca8aefbd20539180c
- https://github.com/pydantic/pydantic-ai/commit/2fd38792693da00a3ca5412aeffb436787af3545
- https://github.com/pydantic/pydantic-ai
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.7
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.52.0
CVE-2026-107287 · published · modified · JSON
PyPI/pydantic-ai CVE-2026-107287: medium 6.5, EPSS 0.28%
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Action: Upgrade pydantic-ai to 1.107.7 or later.
pip install pydantic-ai==1.107.7pip install pydantic-ai==2.52.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.77.0 | 1.107.7 | - |
| 2.0.0b1 | 2.52.0 | - |
Fixed versions
| 1.107.7 | 2.52.0 |
Sources
- osv: PYSEC-2026-4281
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw
- https://github.com/pydantic/pydantic-ai/pull/8984
- https://github.com/pydantic/pydantic-ai/pull/8985
- https://github.com/pydantic/pydantic-ai/commit/2b247add4950bef61d352e7ca8aefbd20539180c
- https://github.com/pydantic/pydantic-ai/commit/2fd38792693da00a3ca5412aeffb436787af3545
- https://github.com/pydantic/pydantic-ai
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.7
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.52.0
- https://pypi.org/project/pydantic-ai
- https://github.com/advisories/GHSA-v36g-jcw9-x7cw
- https://nvd.nist.gov/vuln/detail/CVE-2026-107287
CVE-2026-107287 · published · modified · JSON
PyPI/pydantic-ai-slim CVE-2026-107287: medium 6.5, EPSS 0.28%
Pydantic AI: Excessive resource use when local web fetching converts nested HTML
Action: Upgrade pydantic-ai-slim to 1.107.7 or later.
pip install pydantic-ai-slim==1.107.7pip install pydantic-ai-slim==2.52.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.77.0 | 1.107.7 | - |
| 2.0.0b1 | 2.52.0 | - |
Fixed versions
| 1.107.7 | 2.52.0 |
Sources
- osv: PYSEC-2026-4290
- https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-v36g-jcw9-x7cw
- https://github.com/pydantic/pydantic-ai/pull/8984
- https://github.com/pydantic/pydantic-ai/pull/8985
- https://github.com/pydantic/pydantic-ai/commit/2b247add4950bef61d352e7ca8aefbd20539180c
- https://github.com/pydantic/pydantic-ai/commit/2fd38792693da00a3ca5412aeffb436787af3545
- https://github.com/pydantic/pydantic-ai
- https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.7
- https://github.com/pydantic/pydantic-ai/releases/tag/v2.52.0
- https://pypi.org/project/pydantic-ai-slim
- https://github.com/advisories/GHSA-v36g-jcw9-x7cw
- https://nvd.nist.gov/vuln/detail/CVE-2026-107287
CVE-2026-107287 · published · modified · JSON