CVE-2026-107286

High

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early

Carried by container images the latest versions of 2 of 18,090 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
pydantic-ai-slimpypi	2.37.0, 2.50.0	2.53.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

baserowbaserow-chart

1 of the 6 container images this version deploys carry CVE-2026-107286.

Container image	Digest	Package	Fixed in
baserow/backend :2.4.0	af9aa6fe8482	pydantic-ai-slim@2.50.0	2.53.0

20,044

1 of the 1 container images this version deploys carry CVE-2026-107286.

Container image	Digest	Package	Fixed in
ghcr.io/madebyman/gentleman :0.4.0	2b143c89e662	pydantic-ai-slim@2.37.0	2.53.0

1,523

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
baserow/backend :2.4.0	af9aa6fe8482	pydantic-ai-slim@2.50.0	2.53.0	1
ghcr.io/madebyman/gentleman :0.4.0	2b143c89e662	pydantic-ai-slim@2.37.0	2.53.0	1