semantic-kernel
Semantic Kernel Python SDK
Declares an LLM dependency since 2023-04-11 (version 0.2.1.dev0).
Advisories
Advisories that name semantic-kernel as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-26030GHSA-xjw9-4gw8-4rqx: Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution | Critical | < 1.39.4 | 1.39.4 | 2026-02-19 |
| CVE-2026-25592CVE-2026-25592: Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems. Prior to 1.70.0, an… | Critical | < 1.39.3 | 1.39.3 | 2026-02-07 |
Dependencies of the latest release
As declared in PyPI metadata for version 1.45.0. Optional extras are listed with their extra name.
- anthropic[anthropic]Anthropic SDK
- autogen-agentchat[autogen]AutoGen / AG2
- azure-ai-inference[azure]Azure AI Inference / Azure OpenAI SDK
- azure-ai-projectsOpenAI SDK
- chromadb[chroma]Chroma
- faiss-cpu[faiss]FAISS
- google-cloud-aiplatform[google]Google Vertex AI SDK
- google-genai[google]Google Gemini SDK
- mcpModel Context Protocol SDK
- milvus[milvus]Milvus
- mistralai[mistralai]Mistral AI SDK
- ollama[ollama]Ollama client
- openaiOpenAI SDK
- pinecone[pinecone]Pinecone
- pymilvus[milvus]Milvus
- qdrant-client[qdrant]Qdrant
- redisvl[redis]Cohere SDK, FastMCP +5
- sentence-transformers[hugging-face]Hugging Face Hub / Transformers
- transformers[hugging-face]Hugging Face Hub / Transformers
- weaviate-client[weaviate]Weaviate
- aiohttp
- aiortc
- azure-ai-agents
- azure-core-tracing-opentelemetry[azure]
- azure-cosmos[azure]
- azure-identity
- azure-search-documents[azure]
- boto3[aws]
- cloudevents
- defusedxml
- ipykernel[notebooks]
- jinja2
- microsoft-agents-activity[copilotstudio]
- microsoft-agents-copilotstudio-client[copilotstudio]
- motor[mongo]
- nest-asyncio
- numpy
- onnxruntime[onnx]
- onnxruntime-genai[onnx]
- openapi-core
- opentelemetry-api
- opentelemetry-sdk
- oracledb[oracledb]
- pandas[pandas]
- prance
- psycopg[postgres]
- pyarrow[usearch]
- pybars4
- pydantic
- pydantic-settings
- pymongo[mongo]
- pyodbc[sql]
- redis[redis]
- scipy
- torch[hugging-face]
- types-redis[redis]
- typing-extensions
- usearch[usearch]
- websockets
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.