CVE-2026-107291

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-107291", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-07T15:53:23.586Z", "datePublished": "2026-10-08T16:22:51.763Z", "dateUpdated": "2026-10-08T17:25:18.280Z"}, "containers": {"cna": {"title": "Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`", "problemTypes": [{"descriptions": [{"cweId": "CWE-212", "lang": "en", "description": "CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-532", "lang": "en", "description": "CWE-532: Insertion of Sensitive Information into Log File", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8403", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8403"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8404", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8404"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8408", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8408"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8428", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8428"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8429", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8429"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0"}], "affected": [{"vendor": "pydantic", "product": "pydantic-ai", "versions": [{"version": ">= 0.3.4, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}, {"vendor": "pydantic", "product": "pydantic-ai-slim", "versions": [{"version": ">= 0.3.4, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-08T16:22:51.763Z"}, "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0."}], "source": {"advisory": "GHSA-4x9p-g9wm-8q7f", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-08T17:25:09.227835Z", "id": "CVE-2026-107291", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-08T17:25:18.280Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-107291", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-07T15:53:23.586Z", "datePublished": "2026-10-08T16:22:51.763Z", "dateUpdated": "2026-10-08T17:25:18.280Z"}, "containers": {"cna": {"title": "Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`", "problemTypes": [{"descriptions": [{"cweId": "CWE-212", "lang": "en", "description": "CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-532", "lang": "en", "description": "CWE-532: Insertion of Sensitive Information into Log File", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 2.3, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8403", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8403"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8404", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8404"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8408", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8408"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8428", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8428"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8429", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8429"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0"}], "affected": [{"vendor": "pydantic", "product": "pydantic-ai", "versions": [{"version": ">= 0.3.4, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}, {"vendor": "pydantic", "product": "pydantic-ai-slim", "versions": [{"version": ">= 0.3.4, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-08T16:22:51.763Z"}, "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0."}], "source": {"advisory": "GHSA-4x9p-g9wm-8q7f", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-107291", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-08T17:25:09.227835Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-08T17:25:13.936Z"}}]}}

{"affected": [{"affectedData": [{"product": "pydantic-ai", "vendor": "pydantic", "versions": [{"status": "affected", "version": ">= 0.3.4, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}, {"product": "pydantic-ai-slim", "vendor": "pydantic", "versions": [{"status": "affected", "version": ">= 0.3.4, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pydantic:pydantic_ai:*:*:*:*:*:python:*:*", "matchCriteriaId": "B7E9041B-9F7B-4255-AD02-F18EB0BBCA6B", "versionEndExcluding": "1.107.4", "versionStartIncluding": "0.3.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:pydantic:pydantic_ai:*:-:*:*:*:python:*:*", "matchCriteriaId": "7FEC7EC8-5520-4930-8853-83108092F8BF", "versionEndExcluding": "2.44.0", "versionStartIncluding": "2.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured with InstrumentationSettings(include_content=False) can still export sensitive agent content through exception.message and exception.stacktrace events, error status descriptions, and model_request_parameters containing instructions or the prompted_output_template. The exposed data is available to readers of the configured telemetry backend and can include tool feedback, provider error bodies, runtime instructions, and structured-output templates even though message attributes are redacted. This issue does not grant new access to agent data, and deployments that do not use include_content=False are not affected by the setting bypass. This issue is fixed in versions 1.107.6 and 2.44.0."}], "id": "CVE-2026-107291", "lastModified": "2026-10-13T14:34:22.207", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.3, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-107291", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-08T17:25:09.227835Z", "version": "2.0.3"}}]}, "published": "2026-10-08T17:17:14.590", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/pull/8403"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/pull/8404"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/pull/8408"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/pull/8428"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/pull/8429"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Release Notes", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6"}, {"source": "security-advisories@github.com", "tags": ["Patch", "Release Notes", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-212"}, {"lang": "en", "value": "CWE-532"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "pydantic-ai: pydantic-ai-slim: Pydantic AI: Information disclosure via incomplete telemetry content redaction", "id": "2548051", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548051"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-212", "details": ["A flaw was found in Pydantic AI. When OpenTelemetry instrumentation is configured to exclude content, sensitive agent data is still exported to the telemetry backend through exception details, error status descriptions, and model request parameters. An attacker or unauthorized user with read access to the telemetry backend can exploit this flaw to access confidential information, such as runtime instructions, structured-output templates, and tool feedback."], "name": "CVE-2026-107291", "package_state": [{"cpe": "cpe:/a:redhat:lightspeed_core", "fix_state": "Fix deferred", "package_name": "lightspeed-core/lightspeed-stack-rhel9", "product_name": "Lightspeed Core"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-cuda-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-gaudi-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-rocm-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/disk-image-cuda-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}], "public_date": "2026-10-08T16:22:51Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-107291\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-107291\nhttps://github.com/pydantic/pydantic-ai/commit/4e013c51a50659aba2adf7853bfb22bb77f6a518\nhttps://github.com/pydantic/pydantic-ai/commit/6b14c74cb281f899a2ae4fae5327111e33f60771\nhttps://github.com/pydantic/pydantic-ai/commit/7ee27e38ab2e525ca60ff1a25d16413ff989fd79\nhttps://github.com/pydantic/pydantic-ai/commit/963dec5f70d6f558997fc259356c0090cc5ea487\nhttps://github.com/pydantic/pydantic-ai/commit/de4e61515327bd80a19cd8552001c30933e6acc3\nhttps://github.com/pydantic/pydantic-ai/pull/8403\nhttps://github.com/pydantic/pydantic-ai/pull/8404\nhttps://github.com/pydantic/pydantic-ai/pull/8408\nhttps://github.com/pydantic/pydantic-ai/pull/8428\nhttps://github.com/pydantic/pydantic-ai/pull/8429\nhttps://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6\nhttps://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0\nhttps://github.com/pydantic/pydantic-ai/security/advisories/GHSA-4x9p-g9wm-8q7f"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0.3.4,1.107.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[2.0.0b1,2.44.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "pydantic-ai", "source": "cna", "vendor": "pydantic"}, "product": "pydantic-ai", "vendor": "pydantic"}], "created": "2026-10-08T18:00:18.918621+00:00", "updated": "2026-10-08T20:45:14.418623+00:00", "vendors": ["pydantic", "pydantic$PRODUCT$pydantic-ai"]}