Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langgraph

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
PyPI

Advisories 3

  • CVE-2026-118667Medium 4.3

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    Affected: from 1.2.3, fixed in 1.2.14.

  • CVE-2026-48776Medium 4.2

    LangGraph SDK has unsafe URL path construction

    Affected: fixed in 0.3.15.

  • CVE-2026-28277Medium 6.8

    LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

    Affected: fixed in 1.0.10rc1; fixed in 1.0.10.