SAP_SE SAP Cloud SDK for Python Schwachstellen (CVE)

Für SAP_SE SAP Cloud SDK for Python veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

7.5Hoch

CVE-2026-120013 vor 5 Tagen

Path Traversal in Agent Memory Module of SAP Cloud SDK for Python

SAP_SE SAP Cloud SDK for Python

The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path tra…

7.5Hoch

CVE-2026-109799 vor 5 Tagen

Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))

SAP_SE SAP Cloud SDK for Python

The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and …