SAP_SE SAP Cloud SDK for Python güvenlik açıkları (CVE)

SAP_SE SAP Cloud SDK for Python için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

7.5Yüksek

CVE-2026-120013 5 gün önce

Path Traversal in Agent Memory Module of SAP Cloud SDK for Python

SAP_SE SAP Cloud SDK for Python

The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path tra…

7.5Yüksek

CVE-2026-109799 5 gün önce

Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))

SAP_SE SAP Cloud SDK for Python

The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and …