{"action":"Upgrade anthropic to 0.87.0 or later.","affected":[{"fixed":"0.87.0","introduced":"0.86.0"}],"component":"anthropic","cve_ids":["CVE-2026-34450"],"ecosystem":"PyPI","epss":0.00127,"exploited":false,"fixed_versions":["0.87.0"],"ghsa_id":"GHSA-q5f5-3gjm-7mfm","id":"tcs_01M5KGXJ7EPPTRDZQEZ26ZPWBY","modified_at":"2026-07-13T07:15:14.194051288Z","published_at":"2026-03-31T22:16:19.987Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2114","https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0","https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-q5f5-3gjm-7mfm","https://github.com/anthropics/anthropic-sdk-python/commit/715030ceb4d6dd8d3546e999c680e29532bf1255"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-2114","url":"https://osv.dev/vulnerability/PYSEC-2026-2114"}],"summary":"The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created"}