pydantic-ai-slim vulnerabilities
CVEs whose affected-version data names the pydantic-ai-slim package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-54249Medium· 6.8Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
▾ Sunlitpydantic-ai-slim · pydantic-ai-slimEPSS 0.20%via GHSA
CVE-2026-48782Medium· 6.8pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
▾ Sunlitpydantic-ai-slim · pydantic-ai-slimEPSS 0.32%via GHSA
CVE-2026-46678Medium· 6.8Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
▾ Sunlitpydantic-ai · pydantic-aiEPSS 0.42%via OSV