{"action":"Upgrade pydantic-ai to 1.102.0 or later.","affected":[{"fixed":"1.102.0","introduced":"1.56.0"},{"fixed":"2.0.0b3","introduced":"2.0.0b1"}],"component":"pydantic-ai","cve_ids":["CVE-2026-48782"],"ecosystem":"PyPI","epss":0.00401,"exploited":false,"fixed_versions":["1.102.0","2.0.0b3"],"ghsa_id":"GHSA-cg7w-rg45-pc59","id":"tcs_01M5KH2PPKN8XY60HC0Z2295W2","modified_at":"2026-07-13T16:43:36.056155706Z","published_at":"2026-07-13T15:46:24.590052Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2977","https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-cg7w-rg45-pc59","https://nvd.nist.gov/vuln/detail/CVE-2026-48782","https://github.com/pydantic/pydantic-ai/pull/5596","https://github.com/pydantic/pydantic-ai/commit/1add06179ba4de259f7ab977620b697b7209f7e4","https://github.com/pydantic/pydantic-ai","https://github.com/pydantic/pydantic-ai/releases/tag/v1.102.0","https://pypi.org/project/pydantic-ai","https://github.com/advisories/GHSA-cg7w-rg45-pc59"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-2977","url":"https://osv.dev/vulnerability/PYSEC-2026-2977"}],"summary":"pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)"}