baicai-base (0.1.2), baicai-tutor (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.4.1)

langgraph PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 - botrun-flow-lang =5.5.211, =0.1.0, =0.3.1 Source cves: CVE-2026-28277 Source advisory:...

enable-ai (>=0.1.0, <=0.4.1), freiburg-ris-ca (0.1.0) +1 more potentially affected by CVE-2026-28277 via langgraph (0.2.31)

langgraph PYPI version 0.2.31 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - enable-ai =0.1.0, =0.4.1 - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

abs-langchain-suite (>=0.2.1, <=0.3.1), ag-ui-langgraph (>=0.0.5a0, <=0.0.14a0) +63 more potentially affected by CVE-2026-28277 via langgraph (0.6.11)

langgraph PYPI version 0.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.2.1, =0.0.5a0, =2.1.7, =1.3.9, =0.1.3, =0.6.0, =0.1.0, =1.0.6, =0.1.58, =0.1.64 and more Source cves: CVE-2026-28277...

aiagents4pharma (>=1.8.2, <=1.23.0) potentially affected by CVE-2026-28277 via langgraph (0.2.66)

langgraph PYPI version 0.2.66 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagents4pharma =1.8.2, =1.23.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.2.58)

langgraph PYPI version 0.2.58 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

zeitkapsel-api (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.1.15)

langgraph PYPI version 0.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - zeitkapsel-api 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

meez (0.2.16) potentially affected by CVE-2026-28277 via langgraph (0.6.0)

langgraph PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - meez 0.2.16 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

converso (0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.0.15)

langgraph PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - converso 0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

aiagentgraph (>=0.0.1, <=0.0.4a1) potentially affected by CVE-2026-28277 via langgraph (0.0.53)

langgraph PYPI version 0.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagentgraph =0.0.1, =0.0.4a1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

beamlit (0.0.20rc6) potentially affected by CVE-2026-28277 via langgraph (0.2.40)

langgraph PYPI version 0.2.40 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - beamlit 0.0.20rc6 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.2.58)

langgraph PYPI version 0.2.58 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

nodeology (0.0.3), terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-28277 via langgraph (0.2.45)

langgraph PYPI version 0.2.45 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - nodeology 0.0.3 - terminaider =0.1.1, =0.1.3 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

aiagents4pharma (>=1.8.2, <=1.23.0) potentially affected by CVE-2026-28277 via langgraph (0.2.66)

langgraph PYPI version 0.2.66 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagents4pharma =1.8.2, =1.23.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

cryptocom-agent-client (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-28277 via langgraph (0.2.61)

langgraph PYPI version 0.2.61 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - cryptocom-agent-client =1.0.0, =1.0.7 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ads4gpts-langgraph-agent (>=0.1.1, <=0.1.10), ag-ui-langgraph (0.0.1a0) +60 more potentially affected by CVE-2026-28277 via langgraph (0.3.34)

langgraph PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ads4gpts-langgraph-agent =0.1.1, =0.2.0a1, =0.0.3rc0, =0.9.100, =0.1.0a0.dev0, =0.0.0, =0.1.0, =0.10.0, =0.2.3, =0.2.57 and more Source cves:...

ap-rest-client (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-28277 via langgraph (0.3.2)

langgraph PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.1, =0.0.5 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

abs-langchain-suite (>=0.2.1, <=0.3.1), ag-ui-langgraph (>=0.0.5a0, <=0.0.14a0) +63 more potentially affected by CVE-2026-28277 via langgraph (0.6.11)

langgraph PYPI version 0.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.2.1, =0.0.5a0, =2.1.7, =1.3.9, =0.1.3, =0.6.0, =0.1.0, =1.0.6, =0.1.58, =0.1.64 and more Source cves: CVE-2026-28277...

materials-informatics-agent (>=0.1.8, <=0.1.24) potentially affected by CVE-2026-28277 via langgraph (0.3.26)

langgraph PYPI version 0.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - materials-informatics-agent =0.1.8, =0.1.24 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

algorin-cli (>=0.0.1, <=0.21.0) potentially affected by CVE-2026-28277 via langgraph (0.0.29)

langgraph PYPI version 0.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - algorin-cli =0.0.1, =0.21.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...