- Latest release
- 1.64.0 (Nov 4, 2026): no advisory affects it
- Newest unaffected release
- 1.64.0 (Nov 4, 2026), the latest release
- Advisories
- 3 · 2 high, 1 medium
- Weekly downloads
- 8.9M
- Dependents
- 243
- Releases
- 89 since 0.0.1 (May 14, 2025)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- GHSA-3W55-933P-8PV5Affects 0.0.1 to 1.47.0 (1.48.0 is outside it)
- GHSA-763V-5PJM-FX36Affects 0.0.1 to 1.47.0 (1.48.0 is outside it)
- CVE-2026-115419Affects 0.0.1 to 1.42.0 (1.43.0 is outside it)
Advisories 3
Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
Affected: fixed in 1.48.0.
Fixed in 1.48.0 (released Jul 17, 2026, 102 days before disclosure).
The latest release, 1.64.0, is not affected.
- GHSA-763V-5PJM-FX36Medium
Strands Agents: Default FileSessionManager storage is world-readable on shared systems
Affected: fixed in 1.48.0.
Fixed in 1.48.0 (released Jul 17, 2026, 102 days before disclosure).
The latest release, 1.64.0, is not affected.
- CVE-2026-115419High 8.1
Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
Affected: fixed in 1.43.0.
Fixed in 1.43.0 (released Jun 12, 2026, 132 days before disclosure).
The latest release, 1.64.0, is not affected.