CVE-2026-46383

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install on supported Python 3.10 and 3.11 runtimes. When apm install is given a...

CVE-2026-46383

creationtimestamp| type| source ---|---|--- 2026-05-11 14:08:53+00:00| published-proof-of-concept| https://github.com/microsoft/apm/security/advisories/GHSA-mq5j-pw29-jcv3 2026-05-15 18:40:29+00:00| seen| https://gist.github.com/alon710/603dfdf0e01af88d7ae6413c9f3332fe...