Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pydantic/pydantic-ai

              main @ b2124d0
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

SSRF: 7 prior fixes. Scrutinize any change in this area.

pydantic_ai_slim/pydantic_ai/_ssrf.py: most-fixed (5 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SSRF: Attackers bypassed initial IP/domain blocklists using IPv6-wrapped IPv4 transition formats (Teredo, ISATAP, NAT64, 6to4) and trailing FQDN dots to access cloud metadata endpoints and local networks.

SSRF: Untrusted client messages could specify malicious cloud storage schemes (s3://, gs://) or force local downloads via 'allow-local' arguments, causing SSRF and unauthorized credential exposure.

Information Disclosure: User prompts, completion contents, and tool arguments were automatically forwarded to OpenTelemetry endpoints even when 'include_content=False' was explicitly configured.