PydanticAI v2.28.0 发布：修复高危漏洞并新增实时语音功能

AI 摘要

PydanticAI 发布 v2.28.0 版本，修复了开发 Web 聊天界面中的高危安全漏洞，该漏洞允许跨域请求触发代理执行工具。新版本增加了实时语音到语音支持、Crusoe 提供商以及浏览器 WebRTC 支持，并修复了多个 Bug。

正文节选

### 🛡️ Security Fixes a high-severity vulnerability in the development web chat UI (`Agent.to_web()`, `clai web`): the chat endpoint didn't check the request's content type, so a plain cross-origin request from a website open in the developer's browser could reach the endpoint without a CORS preflight and trigger the served agent to run and execute its tools with the local process's privileges and credentials. The endpoint now requires `Content-Type: application/json` and rejects other requests

发布时间：2026-08-12 10:04

抓取时间：2026-08-12 10:59

来源机构：Pydantic