Skip to content
OpenAdvisories

Package · PyPI

langgraph-checkpoint

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.8

    LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under con…

  • Medium 6.6

    LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

    LangGraph Checkpoint defines the base interface for LangGraph checkpointers. Prior to version 4.0.0, a Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache backends that inherit from `BaseCache` and opt nodes …