PyPI/anthropic CVE-2026-34452: medium 5.3, EPSS 0.14%
The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK v
Action: Upgrade anthropic to 0.87.0 or later.
pip install anthropic==0.87.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.86.0 | 0.87.0 | - |
Fixed versions
| 0.87.0 |
Sources
- osv: PYSEC-2026-2115
- https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
- https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-w828-4qhx-vxx3
- https://github.com/anthropics/anthropic-sdk-python/commit/6599043eee6e86dce16953fcd1fd828052052be6
CVE-2026-34452 · published · modified · JSON