HackerNoon

Designing Cloud-Native Extensions on SAP BTP with CAPM: Patterns for Clean-Core Architectures

Principal propagation does not feature in the design of which extensions preserve core system authorization and audit trails’ ...
HackerNoon

OData at Scale: When to Use CDS Views, RAP, or API Business Hub in Hybrid SAP

Choose between CDS-view OData, custom RAP services, and API Business Hub in hybrid SAP landscapes, with Cloud Connector, security, and performance trade-offs.
BleepingComputer

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. The SAP Python SDK is the ...
GitHub

OAuth2 SSRF vulnerability in SAP Cloud SDK for Python

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...
GitHub

The SAP Cloud SDK for Python contains an OAuth2 SSRF...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...
The Hacker News

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ...