kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

baicai-base (0.1.2), baicai-tutor (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.25)

langgraph-checkpoint PYPI version 2.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

abs-langchain-suite (>=0.1.5, <=0.2.0), actava (0.1.1) +235 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.2)

langgraph-checkpoint PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - abs-langchain-suite =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.2, =0.1.25 -...

mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.20)

langgraph-checkpoint PYPI version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mcp-hybrid-search =1.1.2, =1.1.7 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.8)

langgraph-checkpoint PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.10)

langgraph-checkpoint PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.2)

langgraph-checkpoint PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.2.0) +270 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (>=1.0.2, <=2.1.2)

langgraph-checkpoint PYPI version =1.0.2, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.2, =0.1.37 and more Source cves: CVE-2025-64439 Source advisory: MEND:CVE-2025-64439...

mafiagg (1.0.4) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.6)

langgraph-checkpoint PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mafiagg 1.0.4 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.2)

langgraph-checkpoint PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

kgraphplanner (>=0.0.12, <=0.0.13) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.7)

langgraph-checkpoint PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.12, =0.0.13 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.8)

langgraph-checkpoint PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.20)

langgraph-checkpoint PYPI version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mcp-hybrid-search =1.1.2, =1.1.7 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

brickllm (>=1.0.0, <=1.3.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.14)

langgraph-checkpoint PYPI version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - brickllm =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.3 Source cves: CVE-2025-64439...

agentiacap (>=0.1.31, <=0.1.37) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.16)

langgraph-checkpoint PYPI version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentiacap =0.1.31, =0.1.37 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

a2a-client-handler (0.1.0), chemgraph (0.6.0) +7 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.0)

langgraph-checkpoint PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - a2a-client-handler 0.1.0 - chemgraph 0.6.0 - chemgraphagent 0.5.0 - coshop =0.1.0, =0.0.12, =0.1.0, =0.0.11, =0.2.1,...

CVE-2025-64439

creationtimestamp| type| source ---|---|--- 2025-11-05 15:13:54+00:00| published-proof-of-concept| https://github.com/langchain-ai/langgraph/security/advisories/GHSA-wwqv-p2pp-99h5 2025-11-07 23:27:33+00:00| seen|...