Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langgraph-sdk

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 2 medium
Weekly downloads
13.3M
Dependents
4,181
Registry
PyPI

Advisories 3

  • CVE-2026-118667Medium 4.3

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    Affected: from 0.4.0, fixed in 0.4.6.

  • LangGraph SDK custom auth silently ignores actions= on resource decorators

    Affected: from 0.1.45, fixed in 0.4.4.

  • CVE-2026-48776Medium 4.2

    LangGraph SDK has unsafe URL path construction

    Affected: fixed in 0.3.15.