# Pydantic AI v1.107.10 (2026-11-04)

Category: agent-infrastructure
Published: 2026-11-04T11:51:48Z
Source: [Pydantic AI releases](https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.10)
Agent usefulness: 57/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-11-04T12:18:00.260Z
Tags: pydantic-ai, typed-agents, python

## Human Summary
Pydantic AI releases published Pydantic AI v1.107.10 (2026-11-04). What's Changed 🛡️ Security GHSA-m5vj-8mcw-82qx (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-m5vj-8mcw-82qx) (high): web fetch tool and the WebFetch capability's local fallback re-indented a JSON response on the event loop before applying the returned-content limit, so a…

## Agent Summary
Treat Pydantic AI v1.107.10 (2026-11-04) as an official release signal. Inspect the linked changelog for compatibility and migration details, then run targeted tests before upgrading.

## Body
Pydantic AI releases published Pydantic AI v1.107.10 (2026-11-04). This automated release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: What's Changed 🛡️ Security GHSA-m5vj-8mcw-82qx (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-m5vj-8mcw-82qx) (high): web fetch tool and the WebFetch capability's local fallback re-indented a JSON response on the event loop before applying the returned-content limit, so a deeply nested document within the download size limit could expand to hundreds of times its size, using large amounts of memory and delaying other work in the same process. You are affected if an attacker can choose or influence the URLs the tool fetches. Provider-native web fetching is not affected. Fixed in v1.107.10 and v2.66.0 ( pydantic-ai , pydantic-ai-slim ). GHSA-5fj9-5pjw-vpwc (https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-5fj9-5pjw-vpwc) (medium): The cloud-metadata blocklist that URL downloads check did not include Tencent Cloud's instance metadata address 169.254.0.23…

## Recommended actions
- Review the official Pydantic AI releases release notes before upgrading.
- Check compatibility, migration, and security notes against your current agent stack.
- Run focused regression tests before production rollout.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.