Pydantic AI v1.107.7 fixes web_fetch tool security vulnerability (GHSA-v36g-jcw9-x7cw)

Pydantic AI released v1 line maintenance version v1.107.7, backporting the security fix from 2.52.0. The vulnerability (GHSA-v36g-jcw9-x7cw, medium severity) stems from the local web_fetch tool consuming excessive CPU and memory when converting attacker-controlled deeply nested HTML; scenarios using the provider's native web scraping are not affected. The vulnerability has been fixed in 1.107.7 and in 2.52.0 on the v2 line.