CVE-2026-104873 LangGraph SDK custom auth silently ignores actions= on resource decorators

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

grimoirelab (>=1.9.1rc1, <=1.9.2), infrahub-server (>=1.6.0b0, <=1.8.0b0) +3 more potentially affected by unknown CVE via dulwich (0.22.7)

dulwich PYPI version 0.22.7 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoirelab =1.9.1rc1, =1.6.0b0, =0.1.2, =0.36.2, =0.8.0b4, =0.9.0rc1 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

@0xclearview/svelte-tiny-virtual-table (>=0.0.1, <=0.0.4), @0xkamal7/sui-agent (>=1.1.2, <=1.1.5) +3481 more potentially affected by CVE-2026-104848 via tinypool (>=0.0.3, <=2.1.0)

tinypool NPM version =0.0.3, =0.0.1, =1.1.2, =1.0.3, =0.1.0, =0.0.1, =0.1.4, =0.1.0, =15.0.0, =0.0.1, =0.2.4, =1.57.7, =1.0.0, =0.0.1, =1.0.7, =1.0.14 and more Source cves: CVE-2026-104848 Source advisory: MEND:CVE-2026-104848...

GHSA-C9XM-49CP-XCR9 rmcp OAuth client fetches server-controlled resource_metadata URLs

Summary The rmcp OAuth client accepts a server-controlled resourcemetadata= URL from the WWW-Authenticate header and fetches it without same-origin or private-network validation. An attacker-controlled MCP server can return a 401 WWW-Authenticate: Bearer resourcemetadata="..." header pointing at ...

rmcp OAuth client fetches server-controlled resource_metadata URLs

Summary The rmcp OAuth client accepts a server-controlled resourcemetadata= URL from the WWW-Authenticate header and fetches it without same-origin or private-network validation. An attacker-controlled MCP server can return a 401 WWW-Authenticate: Bearer resourcemetadata="..." header pointing at ...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ affect IBM Cloud Pak System due to the July 2026 CPU

Summary Multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is...

21millionpixels-mcp (>=0.2.0, <=0.2.1), @0xkillaflow/agama-redmine-mcp (>=1.0.0, <=2.1.0) +4898 more potentially affected by unknown CVE via @modelcontextprotocol/sdk (>=1.24.0, <=1.31.0)

@modelcontextprotocol/sdk NPM version =1.24.0, =0.2.0, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.14.0, =0.1.0, =0.2.0, =0.7.0, =1.0.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0090...

CVE-2026-104873: Incorrect Authorization

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

PT-2026-104432

Name of the Vulnerable Software and Affected Versions LangGraph Python SDK versions 0.1.45 through 0.4.3 Description Resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the actions argument and register the selected handler for every action on...

GO-2026-6616 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation in go.opentelemetry.io/otel/sdk...

GO-2026-6615 OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log

OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full in go.opentelemetry.io/otel/sdk/log...

meta-g (>=1.0.0, <=1.0.494998), metag-sdk-ionic (>=1.0.0, <=1.1.6) potentially affected by CVE-2026-103922 via @capacitor/ios (6.1.2)

@capacitor/ios NPM version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/ios and may be impacted: - meta-g =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: MEND:CVE-2026-103922...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-102999 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...

5mghost-rover (>=0.0.1, <=0.0.3), ace-framework (>=0.6.0, <=0.7.3) +183 more potentially affected by CVE-2026-102999 via pypdf (>=6.0.0, <=6.18.1)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =0.0.0, =1.1.0, =0.1.2, =0.0.1.dev0, =1.0.0a3, =0.1.3, =0.1.8 and more Source cves: CVE-2026-102999 Source advisory: OSV:PYSEC-2026-4159...

5mghost-rover (>=0.0.1, <=0.0.3), ace-framework (>=0.6.0, <=0.7.3) +180 more potentially affected by CVE-2026-102993 via pypdf (>=6.0.0, <=6.16.2)

pypdf PYPI version =6.0.0, =0.0.1, =0.6.0, =0.1.0, =0.0.2, =0.1.0, =0.0.24, =0.0.0, =1.1.0, =0.1.2, =0.0.1.dev0, =1.0.0a3, =0.2.0, =0.3.0 and more Source cves: CVE-2026-102993 Source advisory: OSV:PYSEC-2026-4158...

add-staves (>=0.1.1, <=0.2.4), agentix-agent-sdk (0.1.0) +135 more potentially affected by CVE-2026-102996 via pypdf (4.3.1)

pypdf PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - add-staves =0.1.1, =0.0.1, =0.0.1.dev1, =3.0.0, =0.1.0, =1.0.0, =0.3.8.0, =0.3.2, =0.1.6, =1725528079.0.0, =0.1.4, =0.1.9 and more Source cves:...