Lucene search
+L

46 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•34 views

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

SummaryWhen an application using Pydantic AI opts a URL into forcedownload='allow-local' which disables the default block on private/internal IPs and runs on a network that routes the affected IPv6 transition forms NAT64- or ISATAP-configured networks, the cloud-metadata blocklist could be bypass...

6.8CVSS6.1AI score0.00417EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder