CVE-2025-64439 LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In versions 2.1.2 and below, the JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a Remote Code Execution RCE...

CVE-2025-64439 LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In versions 2.1.2 and below, the JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a Remote Code Execution RCE...

CVE-2025-64439

CVE-2025-64439 : LangGraph SQLite Checkpoint uses JsonPlusSerializer (default for all checkpointing) with a potential RCE when deserializing payloads saved in the json mode. Prior to 3.0.0, if Unicode surrogate values caused serialization to fail, it could fall back to json, enabling deserializat...

kgraphplanner (0.0.2) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.2)

langgraph-checkpoint PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner 0.0.2 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

autonomous-agent (0.0.1), tolstoy-agents (>=0.1.29, <=0.1.49) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.8)

langgraph-checkpoint PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - autonomous-agent 0.0.1 - tolstoy-agents =0.1.29, =0.1.49 Source cves: CVE-2025-64439 Source advisory:...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.12)

langgraph-checkpoint PYPI version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =0.3.0, =0.3.5 Source cves: CVE-2025-64439 Source advisory:...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

brickllm (>=1.0.0, <=1.3.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.14)

langgraph-checkpoint PYPI version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - brickllm =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.3 Source cves: CVE-2025-64439...

chainlite (>=0.3.6, <=0.3.7), quivr-modified-milvus (0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.1)

langgraph-checkpoint PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - chainlite =0.3.6, =0.3.7 - quivr-modified-milvus 0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-9...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.2)

langgraph-checkpoint PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

mafiagg (1.0.4) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.6)

langgraph-checkpoint PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mafiagg 1.0.4 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

kgraphplanner (>=0.0.12, <=0.0.13) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.7)

langgraph-checkpoint PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.12, =0.0.13 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.8)

langgraph-checkpoint PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.10)

langgraph-checkpoint PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

agentiacap (>=0.1.31, <=0.1.37) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.16)

langgraph-checkpoint PYPI version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentiacap =0.1.31, =0.1.37 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.20)

langgraph-checkpoint PYPI version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mcp-hybrid-search =1.1.2, =1.1.7 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

baicai-base (0.1.2), baicai-tutor (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.25)

langgraph-checkpoint PYPI version 2.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

agentfoundry (1.2.9.1), py-agent-search (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.26)

langgraph-checkpoint PYPI version 2.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentfoundry 1.2.9.1 - py-agent-search =1.0.0, =0.1.0, =1.3.41 Source cves: CVE-2025-64439 Source advisory:...

a2a-client-handler (0.1.0), chemgraph (0.6.0) +7 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.0)

langgraph-checkpoint PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - a2a-client-handler 0.1.0 - chemgraph 0.6.0 - chemgraphagent 0.5.0 - coshop =0.1.0, =0.0.12, =0.1.0, =0.0.11, =0.2.1,...