include_content=False Didn't Stop pydantic-ai's MCP Token Leak
This story is from 2026-10-26. It is preserved in the archive; the latest stories are on the live feed.
Originally published at webofmike.com on 2026-10-26. The demo repo and every command in it were run before publishing. pydantic-ai shipped two security fixes on 2026-10-19. The one I reproduced, GHSA-xv4x-g8mx-ch56 , is a two-flag problem: include_content=False does exactly what it says for prompts…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-26 15:59 · DEV Community — AI
include_content=False Didn't Stop pydantic-ai's MCP Token Leak