a2cli (>=0.1.0 <=0.2.1), a2py (>=0.2.1 <=0.2.3) +425 more potentially affected by CVE-2026-25580 via pydantic-ai (>=0.0.30 <=1.55.0)

pydantic-ai PYPI version =0.0.30, =0.1.0, =0.2.1, =0.1.0, =0.2.5, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-25580 Source advisory: OSV:GHSA-2JRP-274C-JHV3...

PT-2026-6789

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 1.34.0 through 1.50.9 Description Pydantic AI contains a path traversal issue in its web UI. A crafted URL can be used by an attacker to serve arbitrary JavaScript within the application's context. This allows execution of...

pydantic-ai 跨站脚本漏洞

Pydantic-ai is a generative AI framework developed by Pydantic for building production-level applications and workflows. Versions of pydantic-ai from 1.34.0 to 1.51.0 had a cross-site scripting vulnerability. This vulnerability stemmed from path traversal in the Web UI, which could allow attacker...

PT-2026-6846

Summary A Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially...

pydantic-ai 代码问题漏洞

Pydantic-ai is a generative AI framework developed by Pydantic for building production-grade applications and workflows. Versions of pydantic-ai prior to 1.56.0 contained code vulnerabilities. These vulnerabilities stemmed from a server-side request forgeing vulnerability in the URL download...

PT-2026-6796

Name of the Vulnerable Software and Affected Versions Pydantic AI versions 0.0.26 through 1.55.9 Description A Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include...

PT-2026-6869

Summary A Path Traversal vulnerability in the Pydantic AI web UI allows an attacker to serve arbitrary JavaScript in the context of the application by crafting a malicious URL. If a victim clicks the link or visits it via an iframe, attacker-controlled code executes in their browser, enabling the...

TencentOS Server 4: python-pydantic (TSSA-2024:1015)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1015 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.5-1.fc43

The pydantic-core project provides the core validation logic for pydantic written in Rust...

[SECURITY] Fedora 43 Update: python-pydantic-2.12.4-1.fc43

Data validation and settings management using python type hinting...

Fedora 43 : python-cloudpickle / python-pydantic / python-pydantic-core / etc (2025-312ac3e645)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-312ac3e645 advisory. Pydantic 2.12.4 This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build method of the AnyUrl and Dsn types. This...

[SECURITY] Fedora 43 Update: python-pydantic-core-2.41.4-1.fc43

The pydantic-core project provides the core validation logic for pydantic written in Rust...

[SECURITY] Fedora 43 Update: python-pydantic-extra-types-2.10.6-2.fc43

A place for pydantic types that probably shouldn't exist in the main pydantic library...

[SECURITY] Fedora 43 Update: python-pydantic-2.12.3-1.fc43

Data validation and settings management using python type hinting...

Fedora 43 : fastapi-cli / fastapi-cloud-cli / gherkin / maturin / etc (2025-4154ea83d0)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-4154ea83d0 advisory. uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ---- ruff 0.14.2...

EUVD-2021-0206

Malware in sbrugna...

EUVD-2024-1252

Malicious code in bioql PyPI...

MAL-2025-6951 Malicious code in pydantic-settings (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in pydantic-settings (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in pydantic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb9e1c20553202c4b4edf9fe0ab41cf161494ea68d49f7c930d8a5059b6543b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...