Summary

Pydantic AI 2.44 fixes four vulnerabilities reachable through web fetching or OpenTelemetry instrumentation. The fixes cover an IPv6 zone-identifier bypass of private-network blocklists, superlinear processing of attacker-controlled pages, alternate spellings of blocked domains and sensitive content remaining in spans despite include_content=False.

Why it matters

Agent frameworks increasingly combine web access with tracing, so network filters and telemetry redaction are part of the application’s security boundary rather than optional tooling.

Sources