{"schema":"vulnpedia.research/1","cve":"CVE-2026-96620","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm"},{"source":"nvd","sourceId":"CVE-2026-96620","modified":"2026-10-21T22:16:50.597","url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm"}]},{"url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123"},{"source":"nvd","sourceId":"CVE-2026-96620","modified":"2026-10-21T22:16:50.597","url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123"}]},{"url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662"},{"source":"nvd","sourceId":"CVE-2026-96620","modified":"2026-10-21T22:16:50.597","url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662"}]},{"url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-16T19:44:01.260Z","url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121"},{"source":"nvd","sourceId":"CVE-2026-96620","modified":"2026-10-21T22:16:50.597","url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121"}]},{"url":"https://osv.dev/vulnerability/GHSA-h4mw-j7qp-8mwm","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","origins":[{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://osv.dev/vulnerability/GHSA-h4mw-j7qp-8mwm"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://osv.dev/vulnerability/GHSA-h4mw-j7qp-8mwm"}]},{"url":"https://github.com/anthropics/claude-agent-sdk-python","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","origins":[{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://github.com/anthropics/claude-agent-sdk-python"},{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://github.com/anthropics/claude-agent-sdk-python"}]},{"source":"euvd","sourceId":"EUVD-2026-103155","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103155","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-103155","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103155"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","url":"https://osv.dev/vulnerability/GHSA-h4mw-j7qp-8mwm","ecosystem":"PyPI","name":"claude-agent-sdk","purl":"pkg:pypi/claude-agent-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.121"}]}],"versions":["0.0.23","0.1.0","0.1.1","0.1.10","0.1.18","0.1.19","0.1.2","0.1.20","0.1.21","0.1.22","0.1.23","0.1.25","0.1.26","0.1.27","0.1.29","0.1.3","0.1.30","0.1.31","0.1.33","0.1.34","0.1.35","0.1.36","0.1.37","0.1.38","0.1.39","0.1.4","0.1.41","0.1.43","0.1.44","0.1.45","0.1.46","0.1.47","0.1.48","0.1.49","0.1.5","0.1.50","0.1.51","0.1.52","0.1.53","0.1.54","0.1.55","0.1.56","0.1.58","0.1.59","0.1.6","0.1.60","0.1.61","0.1.62","0.1.63","0.1.64","0.1.65","0.1.66","0.1.68","0.1.69","0.1.7","0.1.70","0.1.71","0.1.72","0.1.73","0.1.74","0.1.75","0.1.76","0.1.77","0.1.78","0.1.8","0.1.80","0.1.81","0.1.9","0.2.100","0.2.101","0.2.102","0.2.103","0.2.104","0.2.105","0.2.106","0.2.107","0.2.108","0.2.109","0.2.110","0.2.111","0.2.112","0.2.113","0.2.114","0.2.115","0.2.116","0.2.117","0.2.118","0.2.119","0.2.120","0.2.82","0.2.83","0.2.84","0.2.85","0.2.86","0.2.87","0.2.88","0.2.89","0.2.90","0.2.91","0.2.93","0.2.94","0.2.95","0.2.96","0.2.97","0.2.99"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-h4mw-j7qp-8mwm/GHSA-h4mw-j7qp-8mwm.json"},"modified":"2026-10-16T20:00:04.101685566Z","origins":[{"source":"ghsa","sourceId":"GHSA-h4mw-j7qp-8mwm","modified":"2026-10-16T20:00:04.101685566Z","url":"https://osv.dev/vulnerability/GHSA-h4mw-j7qp-8mwm"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}