{"action":"Upgrade pydantic-ai-slim to 1.102.0 or later.","affected":[{"fixed":"1.102.0","introduced":"1.56.0"},{"fixed":"2.0.0b3","introduced":"2.0.0b1"}],"component":"pydantic-ai-slim","cve_ids":["CVE-2026-48782"],"ecosystem":"PyPI","epss":0.00417,"exploited":false,"fixed_versions":["1.102.0","2.0.0b3"],"ghsa_id":"GHSA-cg7w-rg45-pc59","id":"tcs_01M5KH2QFWCS2R0YREFZ9F0X0H","modified_at":"2026-07-13T16:43:36.056155706Z","published_at":"2026-07-13T15:46:24.440536Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2981","https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-cg7w-rg45-pc59","https://nvd.nist.gov/vuln/detail/CVE-2026-48782","https://github.com/pydantic/pydantic-ai/pull/5596","https://github.com/pydantic/pydantic-ai/commit/1add06179ba4de259f7ab977620b697b7209f7e4","https://github.com/pydantic/pydantic-ai","https://github.com/pydantic/pydantic-ai/releases/tag/v1.102.0","https://pypi.org/project/pydantic-ai-slim","https://github.com/advisories/GHSA-cg7w-rg45-pc59"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-2981","url":"https://osv.dev/vulnerability/PYSEC-2026-2981"}],"summary":"pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)"}