PydanticAI v1.107.4 修复两个安全漏洞

AI 摘要

PydanticAI 发布 v1.107.4 版本，修复了两个安全问题：一个高危漏洞允许跨站请求触发开发 Web 聊天 UI 执行代理工具，现已要求 JSON 内容类型；另一个低危漏洞涉及重试提示内容未按设置脱敏。此前 v1.107.3 因构建工具问题未能发布，此版本包含相同修复。

正文节选

> **Note:** an earlier `v1.107.3` tag/release was cut and deleted tonight — a build-tooling issue ([#7394](https://github.com/pydantic/pydantic-ai/pull/7394): `hatchling` 1.32.0 emitted a package-metadata version PyPI's publish validator didn't yet accept) blocked its publish before anything reached PyPI, so nothing under that version number was ever installable. This release (`1.107.4`) carries the same fixes with the build issue resolved. ### 🛡️ Security This release backports two security f

发布时间：2026-08-12 11:39

抓取时间：2026-08-12 12:06

来源机构：Pydantic