Tools we follow
Pydantic’s Python framework for building your own AI agents. Full changelog →
Dailies and Snack Pack items about this tool, each linked to its official source.
Pydantic AI users, update now: two Medium security fixes are out, one for MCP credentials that could reach OpenTelemetry traces and one for the Vercel AI and AG-UI adapters.
Upgrade to 2.58.0, or 1.107.8 on v1, then restrict access to old traces and rotate any credentials they exposed.
Pydantic AI users, update now: a High-severity fix stops crafted web pages from tying up your app. When web_fetch_tool fetched attacker-controlled HTML with many elements, converting it could delay unrelated work in the same process.
The maintainers published the fix on Oct 21, 2026: upgrade to 2.59.0, or 1.107.9 on v1.
Source: Pydantic AI web_fetch security advisory, Oct 21, 2026