Skip to content
OpenAdvisories

Package · PyPI

langgraph

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.3
    CVE-2026-118667

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an af…

    langchain-ai langgraph langgraph-sdk langgraph-sdk PyPI
  • Medium 4.2
    CVE-2026-48776

    LangGraph SDK has unsafe URL path construction

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values us…

    langchain-ai langchain-sdk langchain-ai langgraph-sdk PyPI
  • Medium 6.8
    CVE-2026-28277

    LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects du…

    langchain-ai langgraph langgraph PyPI