Pydantic AI web_fetch FileUrl未受控内存消耗漏洞(CVE-2026-107264)
Security Advisory
CVE-2026-107264
Medium
Pydantic AI
Affected:
- pydantic-ai>=1.17.0, <1.107.2
- pydantic-ai>=2.0.0b1, <=2.23.0
- pydantic-ai-slim>=1.17.0, <1.107.2
- pydantic-ai-slim>=2.0.0b1, <=2.23.0
Fixed in:
- pydantic-ai>=1.107.2
- pydantic-ai>=2.24.0
- pydantic-ai-slim>=1.107.2
- pydantic-ai-slim>=2.24.0
Referenced CVEs:
CVE-2026-107294 · 6.5
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。