Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 7:17 p.m.16 views

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)

Summary When an application using Pydantic AI opts a URL into forcedownload='allow-local' which disables the default block on private/internal IPs and runs on a network that routes the affected IPv6 transition forms NAT64- or ISATAP-configured networks, the cloud-metadata blocklist could be...

6.8CVSS5.8AI score0.00419EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder