Vulnerabilities for semantic-kernel

First version without a known vulnerability: 1.39.4

Details

• GHSA-xjw9-4gw8-4rqx2026-02-19

  Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution

  Fixed in: 1.39.4

• GHSA-2ww3-72rp-wpp42026-02-06

  Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK

  Fixed in: 1.39.3, 1.71.0