Threats tagged 'ghsa-3589-pxp7-3gj8'

1 threat

Threats tagged 'ghsa-3589-pxp7-3gj8'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-114386pydantic-ai-harness · Allocation of Resources Without Limits or Throttling Medium6.3EPSS 0.3%2026-10-21CVE Database V5CVE-2026-114386 Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected content can make the sandboxed program invoke tools via run_nested_call() without check_before_tool_call, exceeding operator limits on costly or side-effecting tools. EPSS 0.3%Vulnerability pydantic #ghsa-3589-pxp7-3gj8	CVE Database V5	2026-10-21

Showing 1–1 of 1 result