cuga (0.1.0), katalyst (0.9.1) +1 more potentially affected by CVE-2026-28277 via langgraph (0.5.3)

langgraph PYPI version 0.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - cuga 0.1.0 - katalyst 0.9.1 - meez =0.2.11, =0.2.14 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

osintgraph (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.6.2)

langgraph PYPI version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - osintgraph =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

jiuwen-opensource (>=0.0.2, <=0.1.0), meez (0.2.17) potentially affected by CVE-2026-28277 via langgraph (0.6.3)

langgraph PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - jiuwen-opensource =0.0.2, =0.1.0 - meez 0.2.17 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

nodeology (0.0.3), terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-28277 via langgraph (0.2.45)

langgraph PYPI version 0.2.45 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - nodeology 0.0.3 - terminaider =0.1.1, =0.1.3 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

meez (0.2.22), xgae (>=0.1.8, <=0.2.0) potentially affected by CVE-2026-28277 via langgraph (0.6.5)

langgraph PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - meez 0.2.22 - xgae =0.1.8, =0.2.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ap-rest-client (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-28277 via langgraph (0.3.2)

langgraph PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.1, =0.0.5 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

agentic-kit-eda (0.0.2), agentic-kit-flow (0.0.1) potentially affected by CVE-2026-28277 via langgraph (0.3.16)

langgraph PYPI version 0.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentic-kit-eda 0.0.2 - agentic-kit-flow 0.0.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

haistings (0.0.2) potentially affected by CVE-2026-28277 via langgraph (0.2.73)

langgraph PYPI version 0.2.73 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - haistings 0.0.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-28277 via langgraph (0.2.69)

langgraph PYPI version 0.2.69 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

antishlop-cli (1.1.1) potentially affected by CVE-2026-28277 via langgraph (0.2.67)

langgraph PYPI version 0.2.67 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - antishlop-cli 1.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

aita (>=0.1.1, <=0.1.2), langagent (>=0.1.0, <=2.1.6) +2 more potentially affected by CVE-2026-28277 via langgraph (0.0.48)

langgraph PYPI version 0.0.48 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aita =0.1.1, =0.1.0, =0.5.0, =0.5.1 - sn2md 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

miksiai (>=1.0.6, <=1.0.12) potentially affected by CVE-2026-28277 via langgraph (0.0.31)

langgraph PYPI version 0.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - miksiai =1.0.6, =1.0.12 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

agentbruno (>=0.0.2, <=0.0.5), bisheng-langchain (>=0.3.0b0, <=0.3.2.2) potentially affected by CVE-2026-28277 via langgraph (0.0.30)

langgraph PYPI version 0.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentbruno =0.0.2, =0.3.0b0, =0.3.2.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

planning-library (0.1.4) potentially affected by CVE-2026-28277 via langgraph (0.0.26)

langgraph PYPI version 0.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - planning-library 0.1.4 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

docugami-langchain (>=0.0.7rc1, <=0.0.7rc6) potentially affected by CVE-2026-28277 via langgraph (0.0.24)

langgraph PYPI version 0.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - docugami-langchain =0.0.7rc1, =0.0.7rc6 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-28277 via langgraph (0.2.29)

langgraph PYPI version 0.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

adxp-cli (>=0.1.1, <=0.1.21), agent-builder (>=0.0.2, <=0.1.7) +72 more potentially affected by CVE-2026-28277 via langgraph (>=1.0.0a3, <=1.0.9)

langgraph PYPI version =1.0.0a3, =0.1.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =3.0.3, =0.0.2, =0.0.597, =0.1.4, =1.0.0, =0.1.0, =0.1.8, =0.1.92 and more Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

diagram-to-iac (1.0.6) potentially affected by CVE-2026-28277 via langgraph (0.4.9)

langgraph PYPI version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - diagram-to-iac 1.0.6 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)

langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

converso (0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.0.15)

langgraph PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - converso 0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...