HIGH8.6CVE-2026-25580Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling >= 0.0.26, < 1.56.0
HIGH8.6CVE-2026-25580Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling >= 0.0.26, < 1.56.0
HIGH7.1CVE-2026-25640Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL >= 1.34.0, < 1.51.0
HIGH7.1Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
>= 1.34.0, < 1.51.0
MEDIUM6.8pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
>= 1.56.0, < 1.102.0
MEDIUM6.8pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
>= 1.56.0, < 1.102.0, >= 2.0.0b1, < 2.0.0b3
MEDIUM6.8Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
>= 1.56.0, < 1.99.0
MEDIUM6.8Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
>= 1.56.0, < 1.99.0