LangGraph security advisories
2 advisories · 1 critical or high in 12 months · latest Jun 17
2 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 17 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource ope CVE-2026-48776Critical9.1fixed in 0.3.15 | Critical9.1 | 0.3.15 |
| Mar 5 | LangGraph checkpoint loading has unsafe msgpack deserialization CVE-2026-28277Medium6.8fixed in 1.0.10 | Medium6.8 | 1.0.10 |
About LangGraph
Stateful agent orchestration.
Packages watched: langgraph (PyPI).