{"data":{"ecosystem":"pypi","name":"semantic-kernel","url":"https://aisecwatch.com/packages/pypi/semantic-kernel","latestVersion":"1.45.0","firstReleaseAt":"2023-04-11T21:54:39.416Z","repository":"https://github.com/microsoft/semantic-kernel/tree/main/python","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-04-11T21:54:39.416Z","integratedVersion":"0.2.1.dev0","sdks":["semantic-kernel"],"path":[]},"authority":{"profile":["http","mcp_tools"],"fromDependencies":["pypi:aiohttp","pypi:mcp"]},"dependencies":[{"ecosystem":"pypi","name":"anthropic","versionSpec":"~=0.32","scope":"extra:anthropic"},{"ecosystem":"pypi","name":"autogen-agentchat","versionSpec":"<0.4,>=0.2","scope":"extra:autogen"},{"ecosystem":"pypi","name":"azure-ai-inference","versionSpec":">=1.0.0b6","scope":"extra:azure"},{"ecosystem":"pypi","name":"azure-ai-projects","versionSpec":"<2.5,>=1.0","scope":"runtime"},{"ecosystem":"pypi","name":"chromadb","versionSpec":"<1.6,>=0.5","scope":"extra:chroma"},{"ecosystem":"pypi","name":"faiss-cpu","versionSpec":">=1.10.0","scope":"extra:faiss"},{"ecosystem":"pypi","name":"google-cloud-aiplatform","versionSpec":"<1.134,>=1.114","scope":"extra:google"},{"ecosystem":"pypi","name":"google-genai","versionSpec":"<2.23,>=1.51","scope":"extra:google"},{"ecosystem":"pypi","name":"mcp","versionSpec":"<2.0,>=1.26.0","scope":"runtime"},{"ecosystem":"pypi","name":"milvus","versionSpec":"<2.3.8,>=2.3","scope":"extra:milvus"},{"ecosystem":"pypi","name":"mistralai","versionSpec":"<2.0,>=1.2","scope":"extra:mistralai"},{"ecosystem":"pypi","name":"ollama","versionSpec":"~=0.4","scope":"extra:ollama"},{"ecosystem":"pypi","name":"openai","versionSpec":">=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pinecone","versionSpec":"~=7.0","scope":"extra:pinecone"},{"ecosystem":"pypi","name":"pymilvus","versionSpec":"<2.7,>=2.3","scope":"extra:milvus"},{"ecosystem":"pypi","name":"qdrant-client","versionSpec":"~=1.9","scope":"extra:qdrant"},{"ecosystem":"pypi","name":"redisvl","versionSpec":"~=0.4","scope":"extra:redis"},{"ecosystem":"pypi","name":"sentence-transformers","versionSpec":"<6.0,>=2.2","scope":"extra:hugging-face"},{"ecosystem":"pypi","name":"transformers","versionSpec":"<6.0,>=5.5.0","scope":"extra:hugging-face"},{"ecosystem":"pypi","name":"weaviate-client","versionSpec":"<5.0,>=4.17.0","scope":"extra:weaviate"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":"~=3.8","scope":"runtime"},{"ecosystem":"pypi","name":"aiortc","versionSpec":">=1.9.0","scope":"runtime"},{"ecosystem":"pypi","name":"azure-ai-agents","versionSpec":">=1.2.0b3","scope":"runtime"},{"ecosystem":"pypi","name":"azure-core-tracing-opentelemetry","versionSpec":">=1.0.0b11","scope":"extra:azure"},{"ecosystem":"pypi","name":"azure-cosmos","versionSpec":"~=4.7","scope":"extra:azure"},{"ecosystem":"pypi","name":"azure-identity","versionSpec":">=1.13","scope":"runtime"},{"ecosystem":"pypi","name":"azure-search-documents","versionSpec":"<13.0.0,>=11.6.0b4","scope":"extra:azure"},{"ecosystem":"pypi","name":"boto3","versionSpec":"<1.43.0,>=1.36.4","scope":"extra:aws"},{"ecosystem":"pypi","name":"cloudevents","versionSpec":"<3,>=1","scope":"runtime"},{"ecosystem":"pypi","name":"defusedxml","versionSpec":"~=0.7","scope":"runtime"},{"ecosystem":"pypi","name":"ipykernel","versionSpec":"<8.0,>=6.29","scope":"extra:notebooks"},{"ecosystem":"pypi","name":"jinja2","versionSpec":"~=3.1","scope":"runtime"},{"ecosystem":"pypi","name":"microsoft-agents-activity","versionSpec":">=0.3.1","scope":"extra:copilotstudio"},{"ecosystem":"pypi","name":"microsoft-agents-copilotstudio-client","versionSpec":">=0.3.1","scope":"extra:copilotstudio"},{"ecosystem":"pypi","name":"motor","versionSpec":"<3.8.0,>=3.3.2","scope":"extra:mongo"},{"ecosystem":"pypi","name":"nest-asyncio","versionSpec":"~=1.6","scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":">=1.25.0","scope":"runtime"},{"ecosystem":"pypi","name":"onnxruntime","versionSpec":"==1.22.1","scope":"extra:onnx"},{"ecosystem":"pypi","name":"onnxruntime-genai","versionSpec":"==0.9.0","scope":"extra:onnx"},{"ecosystem":"pypi","name":"openapi-core","versionSpec":"<0.20,>=0.18","scope":"runtime"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":"~=1.24","scope":"runtime"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"~=1.24","scope":"runtime"},{"ecosystem":"pypi","name":"oracledb","versionSpec":">=3.4.1","scope":"extra:oracledb"},{"ecosystem":"pypi","name":"pandas","versionSpec":"~=2.2","scope":"extra:pandas"},{"ecosystem":"pypi","name":"prance","versionSpec":"<26.7.20,>=23.6.21","scope":"runtime"},{"ecosystem":"pypi","name":"psycopg","versionSpec":"~=3.2","scope":"extra:postgres"},{"ecosystem":"pypi","name":"pyarrow","versionSpec":"<26.0,>=12.0","scope":"extra:usearch"},{"ecosystem":"pypi","name":"pybars4","versionSpec":"~=0.9","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"!=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.14,>=2.0","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic-settings","versionSpec":"~=2.0","scope":"runtime"},{"ecosystem":"pypi","name":"pymongo","versionSpec":"<4.17,>=4.8.0","scope":"extra:mongo"},{"ecosystem":"pypi","name":"pyodbc","versionSpec":">=5.2","scope":"extra:sql"},{"ecosystem":"pypi","name":"redis","versionSpec":"<8,>=6","scope":"extra:redis"},{"ecosystem":"pypi","name":"scipy","versionSpec":">=1.15.1","scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":"==2.13.0","scope":"extra:hugging-face"},{"ecosystem":"pypi","name":"types-redis","versionSpec":"~=4.6.0.20240425","scope":"extra:redis"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":">=4.13","scope":"runtime"},{"ecosystem":"pypi","name":"usearch","versionSpec":"<2.25,>=2.16","scope":"extra:usearch"},{"ecosystem":"pypi","name":"websockets","versionSpec":"<17,>=13","scope":"runtime"}],"advisories":[{"id":"6096387e-31d3-4dc5-9bdf-70f30efebfd3","url":"https://aisecwatch.com/issues/6096387e-31d3-4dc5-9bdf-70f30efebfd3","cveId":"CVE-2026-26030","title":"GHSA-xjw9-4gw8-4rqx: Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution","headline":null,"severity":"critical","publishedAt":"2026-02-19T19:34:14.000Z","affected":["semantic-kernel@< 1.39.4 (fixed: 1.39.4)"],"epssScore":0.03784,"matchedBy":"ecosystem"},{"id":"5f207c75-68f7-4f77-bb48-91fec2adcf78","url":"https://aisecwatch.com/issues/5f207c75-68f7-4f77-bb48-91fec2adcf78","cveId":"CVE-2026-25592","title":"CVE-2026-25592: Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an…","headline":"Semantic Kernel .NET SDK arbitrary file write in SessionsPythonPlugin","severity":"critical","publishedAt":"2026-02-07T02:16:17.647Z","affected":["semantic-kernel@< 1.39.3 (fixed: 1.39.3)","Microsoft.SemanticKernel.Core@< 1.71.0 (fixed: 1.71.0)"],"epssScore":0.02362,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:51:52.511Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}