Pydantic

9 CVEs across 5 Pydantic products. Browse Pydantic vulnerabilities, severities, and proof-of-concept exploits.

Pydantic products with known CVEs

ProductCVEs
Pydantic-Ai6
Pydantic Ai6
Pydantic-Ai-Slim4
Pydantic3
Pydantic-Settings1
Pydantic CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65975Medium6.52026-07-29Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.1 and 2.0…
CVE-2026-54249Medium6.82026-07-29Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a client that…
CVE-2026-46678Medium6.82026-07-29Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL into force_d…
CVE-2026-58203Medium5.32026-07-06pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a config…
CVE-2026-48782Medium6.82026-06-17Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.56.0 through 1.101.0, 2.0.0b1, and 2.0.0b2, t…
CVE-2026-25580High8.62026-02-06Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.0.26 to before 1.56.0, aServer-Side Request Forgery…
CVE-2026-25640High7.12026-02-06Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 to before 1.51.0, a path traversal vulnerabili…
CVE-2024-3772Medium5.92024-04-15Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
CVE-2021-29510Low3.32021-05-13Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either `'infinity'`, `'inf'` or `float('inf')` (o…