skip to content
The Weighted Average

Wire

Pydantic AI caps agent downloads at 50 MiB

Pydantic AI now caps locally fetched web and media files at 50 MiB after finding that one attacker-chosen response could exhaust process memory and crash an agent worker. The framework’s security advisory rates the availability flaw 6.5 and says operators should upgrade to v2.24.0 or v1.107.2; builders should treat remote-file limits as part of the least-privilege harness perimeter described in the case for runtime controls around agent actions, not as an optional HTTP-client setting.