pydantic-ai-harness
archivedBatteries for your Pydantic AI agent.
View on Github
Activity
- Latest release
- 1d ago
- Total releases
- 53
- Cadence
- ~2 days
- Last 12 months
- 53
Reach
- Stars
- 958
Details
- License
- MIT
- First release
- Apr 13, 2026
| Version | Released | |
|---|---|---|
0.63.0
minor
|
0.63.0
minor
Dependencies (31)
+ 23 more
Changelog
Compare changes
|
|
0.62.0
minor
|
0.62.0
minor
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
0.61.0
minor
|
0.61.0
minor
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
0.60.0
minor
|
0.60.0
minor
Dependencies (29)
+ 21 more
Changelog
Compare changes
|
|
0.59.0
minor
|
0.59.0
minor
Dependencies (28)
+ 20 more
Changelog
Compare changes
|
|
0.58.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.58.0
minor
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.57.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.57.0
minor
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.56.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.56.0
minor
Dependencies (27)
+ 19 more
Changelog
Compare changes
|
|
0.55.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.55.0
minor
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.54.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.54.0
minor
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.53.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.53.0
minor
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.52.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |
0.52.0
minor
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.36.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.35.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.34.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.33.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.32.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.31.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.30.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.29.1
patch
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.29.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.28.1
patch
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.28.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.27.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.26.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.25.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.24.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.23.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.22.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.21.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.20.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.18.1
patch
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.18.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.17.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.16.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.15.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.14.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.13.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.12.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.11.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.10.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.9.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.8.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.7.1
patch
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.7.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.6.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.5.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.4.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.3.0
minor
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev | ||
0.2.1
patch
1 CVE
CVE-2026-114386
GHSA-3589-pxp7-3gj8
Oct 21, 2026
Pydantic AI Harness tool-call limit bypass in nested CodeMode calls
Medium
Network
Low
None
None
Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. Affected versions
0.1.1
0.1.2
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.18.1
+ 36 more Show less
0.2.0
0.2.1
0.20.0
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.28.1
0.29.0
0.29.1
0.3.0
0.30.0
0.31.0
0.32.0
0.33.0
0.34.0
0.35.0
0.36.0
0.4.0
0.5.0
0.52.0
0.53.0
0.54.0
0.55.0
0.56.0
0.57.0
0.58.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
Fixed in
0.59.0
References
Updated Oct 23, 2026 · Source: OSV.dev |