PyPI/anthropic CVE-2026-34450: medium 4.4, EPSS 0.12%
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created
Action: Upgrade anthropic to 0.87.0 or later.
pip install anthropic==0.87.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.86.0 | 0.87.0 | - |
Fixed versions
| 0.87.0 |
Sources
- osv: PYSEC-2026-2114
- https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
- https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-q5f5-3gjm-7mfm
- https://github.com/anthropics/anthropic-sdk-python/commit/715030ceb4d6dd8d3546e999c680e29532bf1255
CVE-2026-34450 · published · modified · JSON