CVE-2026-28277

creationtimestamp| type| source ---|---|--- 2026-06-11 16:10:14+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u...

adxp-cli (>=0.1.1, <=0.1.21), agent-builder (>=0.0.2, <=0.1.7) +72 more potentially affected by CVE-2026-28277 via langgraph (>=1.0.0a3, <=1.0.9)

langgraph PYPI version =1.0.0a3, =0.1.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =3.0.3, =0.0.2, =0.0.597, =0.1.4, =1.0.0, =0.1.0, =0.1.8, =0.1.92 and more Source cves: CVE-2026-28277 Source advisory: SNYK:PYTHON-LANGGRAPH-15433492...

coshop (>=0.1.0, <=0.1.1), diagram-to-iac (>=0.8.0, <=1.0.5) +6 more potentially affected by CVE-2026-28277 via langgraph (0.4.8)

langgraph PYPI version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - coshop =0.1.0, =0.8.0, =0.1.0, =0.0.11, =0.0.3, =0.0.10 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ads4gpts-langgraph-agent (>=0.1.1, <=0.1.10), ag-ui-langgraph (0.0.1a0) +60 more potentially affected by CVE-2026-28277 via langgraph (0.3.34)

langgraph PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ads4gpts-langgraph-agent =0.1.1, =0.2.0a1, =0.0.3rc0, =0.9.100, =0.1.0a0.dev0, =0.0.0, =0.1.0, =0.10.0, =0.2.3, =0.2.57 and more Source cves:...

bugbug (0.0.595), certora-patrol (>=0.1.3, <=0.1.17) +7 more potentially affected by CVE-2026-28277 via langgraph (0.6.7)

langgraph PYPI version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bugbug 0.0.595 - certora-patrol =0.1.3, =0.1.18, =0.0.2, =0.1.0, =0.1.3, =0.1.4 Source cves: CVE-2026-28277 Source advisory:...

redcoast-orator (0.0.1) potentially affected by CVE-2026-28277 via langgraph (0.2.19)

langgraph PYPI version 0.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - redcoast-orator 0.0.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

aiagentgraph (>=0.0.1, <=0.0.4a1) potentially affected by CVE-2026-28277 via langgraph (0.0.53)

langgraph PYPI version 0.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagentgraph =0.0.1, =0.0.4a1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

raglight (1.4.0) potentially affected by CVE-2026-28277 via langgraph (0.2.59)

langgraph PYPI version 0.2.59 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - raglight 1.4.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ai-asset-screener (>=0.1.0, <=0.1.1), meez (>=0.3.0, <=0.3.3) +3 more potentially affected by CVE-2026-28277 via langgraph (0.6.6)

langgraph PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-asset-screener =0.1.0, =0.3.0, =0.1.1a4, =1.6.0, =0.1.0a3, =0.1.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)

langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ag-ui-langgraph (>=0.0.1a1, <=0.0.4), copilotkit (>=0.1.52a1, <=0.1.57) +6 more potentially affected by CVE-2026-28277 via langgraph (0.5.0)

langgraph PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ag-ui-langgraph =0.0.1a1, =0.1.52a1, =1.4.0, =0.3.0, =0.1.18, =0.0.1.dev0, =0.1.0a1, =1.2.0, =1.5.0 Source cves: CVE-2026-28277 Source advisor...

converso (0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.0.15)

langgraph PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - converso 0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

abs-langchain-suite (>=0.2.1, <=0.3.1), ag-ui-langgraph (>=0.0.5a0, <=0.0.14a0) +63 more potentially affected by CVE-2026-28277 via langgraph (0.6.11)

langgraph PYPI version 0.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.2.1, =0.0.5a0, =2.1.7, =1.3.9, =0.1.3, =0.6.0, =0.1.0, =1.0.6, =0.1.58, =0.1.64 and more Source cves: CVE-2026-28277...

aiagents4pharma (>=1.8.2, <=1.23.0) potentially affected by CVE-2026-28277 via langgraph (0.2.66)

langgraph PYPI version 0.2.66 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagents4pharma =1.8.2, =1.23.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

synforge (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.2.74)

langgraph PYPI version 0.2.74 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - synforge 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

abs-langchain-suite (>=0.2.1, <=0.3.1), ag-ui-langgraph (>=0.0.5a0, <=0.0.14a0) +63 more potentially affected by CVE-2026-28277 via langgraph (0.6.11)

langgraph PYPI version 0.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.2.1, =0.0.5a0, =2.1.7, =1.3.9, =0.1.3, =0.6.0, =0.1.0, =1.0.6, =0.1.58, =0.1.64 and more Source cves: CVE-2026-28277...

raglight (1.4.0) potentially affected by CVE-2026-28277 via langgraph (0.2.59)

langgraph PYPI version 0.2.59 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - raglight 1.4.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

aita (>=0.1.3, <=0.1.5), apexgate-langchain (1.0.9) +10 more potentially affected by CVE-2026-28277 via langgraph (0.1.19)

langgraph PYPI version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aita =0.1.3, =0.5.0, =0.1.6, =1.2.15, =0.0.1, =0.1.0a1, =1.0.5, =0.0.1, =0.0.11 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-8...

bsrag-langchain (0.3.8.0), codemutator (>=0.0.9, <=0.0.22) +2 more potentially affected by CVE-2026-28277 via langgraph (0.0.51)

langgraph PYPI version 0.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bsrag-langchain 0.3.8.0 - codemutator =0.0.9, =0.5.0, =0.5.2 - easyrag 0.0.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

flo-ai (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-28277 via langgraph (0.0.55)

langgraph PYPI version 0.0.55 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - flo-ai =0.0.1, =0.0.3 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...