Lucene search
+L

8 matches found

osv_pysec
osv_pysec
•added 2026/10/15 10:22 a.m.•15 views

PYSEC-2026-4240 LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

7.6CVSS7.2AI score0.00253EPSS
SaveExploits0References7
Rows per page
Query Builder