pydantic-ai 2.44.0 and 1.107.6 patch four advisories

Published 2026-09-17 04:03 UTC. All four issues are reached through web_fetch_tool or OpenTelemetry instrumentation.⁵ The one to read is GHSA-fpf4-vwcp-v4hp, moderate: web_fetch processed HTML conversion and charset decode in superlinear time on the event loop, so a single attacker-chosen page could stall every agent in the process.⁶ GHSA-4x9p-g9wm-8q7f, low: with InstrumentationSettings(include_content=False), spans still carried exceptions, error statuses, instructions and the output template. The remaining two cover a blocklist bypass via an IPv6 zone identifier and domain lists compared as written rather than as the resolver sees them; both sit behind flags that are off by default.⁵