{"action":"Upgrade pydantic-ai to 1.107.4 or later.","affected":[{"fixed":"1.107.4","introduced":"0.3.4"},{"fixed":"2.27.1","introduced":"2.0.0b1"}],"component":"pydantic-ai","cve_ids":["CVE-2026-107293"],"ecosystem":"PyPI","epss":0.00297,"exploited":false,"fixed_versions":["1.107.4","2.27.1"],"ghsa_id":"GHSA-3gh4-cghq-f8v4","id":"tcs_01M5KHB16T8CJCC61B2GABFE6C","modified_at":"2026-10-15T14:56:22.971904466Z","published_at":"2026-10-15T10:22:51.272387Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4274","https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-3gh4-cghq-f8v4","https://github.com/pydantic/pydantic-ai/pull/7357","https://github.com/pydantic/pydantic-ai/commit/fe9dbed7b7ccf7e7128b5786886e4441f6f5594f","https://github.com/pydantic/pydantic-ai","https://github.com/pydantic/pydantic-ai/releases/tag/v2.27.1","https://pypi.org/project/pydantic-ai","https://github.com/advisories/GHSA-3gh4-cghq-f8v4","https://nvd.nist.gov/vuln/detail/CVE-2026-107293"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-4274","url":"https://osv.dev/vulnerability/PYSEC-2026-4274"},{"source":"nvd","source_id":"CVE-2026-107293","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107293"}],"summary":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`"}