{"data":{"ecosystem":"pypi","name":"bedrock-agentcore","url":"https://aisecwatch.com/packages/pypi/bedrock-agentcore","latestVersion":"1.24.1","firstReleaseAt":"2025-07-08T07:39:36.644Z","repository":"https://github.com/aws/bedrock-agentcore-sdk-python/issues","llm":{"exposure":"direct","depth":0,"integratedAt":"2025-09-05T22:53:31.199Z","integratedVersion":"0.1.3","sdks":["langchain","langgraph","mcp","strands"],"path":[]},"authority":{"profile":["http","mcp_tools"],"fromDependencies":["pypi:httpx","pypi:mcp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"deepeval","versionSpec":"<5.0.0,>=3.5.0","scope":"extra:deepeval"},{"ecosystem":"pypi","name":"langchain","versionSpec":">=1.0.0","scope":"extra:langgraph"},{"ecosystem":"pypi","name":"langchain-community","versionSpec":"<0.4.2,>=0.3.0","scope":"extra:ragas"},{"ecosystem":"pypi","name":"langgraph","versionSpec":">=1.0.0","scope":"extra:langgraph"},{"ecosystem":"pypi","name":"mcp","versionSpec":"<2.0.0,>=1.23.0","scope":"extra:strands-agents"},{"ecosystem":"pypi","name":"ragas","versionSpec":"<1.0.0,>=0.4.3","scope":"extra:ragas"},{"ecosystem":"pypi","name":"strands-agents","versionSpec":">=1.56.0","scope":"extra:strands-agents"},{"ecosystem":"pypi","name":"a2a-sdk","versionSpec":"<0.4,>=0.3","scope":"extra:a2a"},{"ecosystem":"pypi","name":"ag-ui-protocol","versionSpec":">=0.1.10","scope":"extra:ag-ui"},{"ecosystem":"pypi","name":"autoevals","versionSpec":"<1.0.0,>=0.3.0","scope":"extra:autoevals"},{"ecosystem":"pypi","name":"boto3","versionSpec":">=1.43.103","scope":"runtime"},{"ecosystem":"pypi","name":"botocore","versionSpec":">=1.43.103","scope":"runtime"},{"ecosystem":"pypi","name":"httpx","versionSpec":">=0.27.0","scope":"extra:langgraph"},{"ecosystem":"pypi","name":"jinja2","versionSpec":">=3.1.0","scope":"extra:simulation"},{"ecosystem":"pypi","name":"langchain-mcp-adapters","versionSpec":">=0.1.0","scope":"extra:langgraph"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"<2.41.3,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":">=2.31.0","scope":"extra:datasets"},{"ecosystem":"pypi","name":"starlette","versionSpec":">=0.46.2","scope":"runtime"},{"ecosystem":"pypi","name":"strands-agents-evals","versionSpec":"<2.0.0,>=1.0.3","scope":"extra:autoevals"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":"<5.0.0,>=4.13.2","scope":"runtime"},{"ecosystem":"pypi","name":"urllib3","versionSpec":">=1.26.0","scope":"runtime"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":">=0.34.2","scope":"runtime"},{"ecosystem":"pypi","name":"websockets","versionSpec":">=13.0","scope":"runtime"}],"advisories":[{"id":"a42108a9-1fa7-46ea-8501-0f22f34aec5e","url":"https://aisecwatch.com/issues/a42108a9-1fa7-46ea-8501-0f22f34aec5e","cveId":"CVE-2026-16796","title":"GHSA-j6g5-3hh3-pgw8: AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()","headline":null,"severity":"high","publishedAt":"2026-07-24T22:38:56.000Z","affected":["bedrock-agentcore@< 1.18.1 (fixed: 1.18.1)"],"epssScore":0.00725,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T22:13:32.072Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}