Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lock
Dependency repairs leave PyJWT and fsspec version alerts in the newest SDK lock. Automation refreshes locked packages and raises published aiohttp, PyJWT and Starlette minimums; the SDK raises its PyJWT constraint/lock to 2.14.0. GHSA-9j54-fg26-wv3r / CVE-2026-102266 allows forged HMAC JWTs when verification accepts an empty symmetric JWK, fixed in 2.14.0. A separate PyJWT issue, GHSA-42vr-xj54-vc7v / CVE-2026-101918, affects the SDK lock’s 2.14.0 and is fixed in 2.15.0: deeply nested unverified payloads can raise an uncaught recursion exception in particular pre-verification paths, potentially yielding HTTP 500. Maintainer triage does not establish worker death or authentication bypass. Automation 1.19.3 locks 2.15.1 and enterprise 1.71.0 locks 2.15.0. Enterprise upgrades fsspec from 2026.3.0 to 2026.9.0; GHSA-27vj-qcqg-25rc / CVE-2026-104851 concerns Python execution through attacker-controlled ReferenceFileSystem templates, fixed from 2026.6.0. SDK v1.54.0 still locks 2025.9.0 and automation 1.19.3 locks 2026.3.0, within the advisory range. The fsspec GHSA database publication is October 5; its original maintainer publication is September 1.
Channel: tagged-release. Half: defect. Date: 2026-09-29 to 2026-10-13 (separately released backend locks).
Operator consequence: Inspect resolved dependencies for each installed backend separately. These lock matches are residual alerts, not demonstrated reachable OpenHands exploits or proof that every surface is fixed. Trace JWT pre-verification consumers and ReferenceFileSystem input reachability before assigning endpoint impact; hosted deployment and local resolution remain unverified.
Receipt
- https://github.com/OpenHands/automation/commit/d971b153bc15f4be918ab1e116a7ee4accf8dc51
- https://github.com/OpenHands/software-agent-sdk/commit/230115adcf4b06ccab20a932bf632cd79dd13bef
- https://github.com/OpenHands/enterprise/commit/2c7a6d88e5c56fb63d2c3d8fc94258822227ed6e
- https://github.com/OpenHands/software-agent-sdk/blob/v1.54.0/uv.lock
- https://github.com/OpenHands/automation/blob/1.19.3/uv.lock
- https://github.com/OpenHands/enterprise/blob/1.71.0/uv.lock
- https://github.com/advisories/GHSA-9j54-fg26-wv3r
- https://github.com/advisories/GHSA-42vr-xj54-vc7v
- https://github.com/advisories/GHSA-27vj-qcqg-25rc
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lock
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/OpenHands/automation/commit/d971b153bc15f4be918ab1e116a7ee4accf8dc51commit2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/OpenHands/software-agent-sdk/commit/230115adcf4b06ccab20a932bf632cd79dd13befcommit2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/OpenHands/enterprise/commit/2c7a6d88e5c56fb63d2c3d8fc94258822227ed6etagged commit file2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockOpenHands/software-agent-sdk / uv.locktagged commit file2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockOpenHands/automation / uv.locktagged commit file2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockOpenHands/enterprise / uv.lockofficial docs2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/advisories/GHSA-9j54-fg26-wv3rofficial docs2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/advisories/GHSA-42vr-xj54-vc7vofficial docs2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lockgithub.com/advisories/GHSA-27vj-qcqg-25rc
Versioned source: run artifact