planning-library (0.1.4) potentially affected by CVE-2026-28277 via langgraph (0.0.26)

langgraph PYPI version 0.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - planning-library 0.1.4 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

converso (0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.0.15)

langgraph PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - converso 0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-28277 via langgraph (0.2.29)

langgraph PYPI version 0.2.29 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

abs-langchain-suite (>=0.1.5, <=0.2.0), agentc-langgraph (>=0.2.5a2, <=1.1.0) +18 more potentially affected by CVE-2026-28277 via langgraph (0.5.4)

langgraph PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.1.5, =0.2.5a2, =1.25.1, =1.0.0, =0.1.0a2, =1.0.0b3, =1.3.0, =0.1.1, =0.1.0, =0.1.28a6, =0.2.13, =0.1.17, =0.0.8, =0.2.0...

adxp-cli (>=0.1.1, <=0.1.21), agent-builder (>=0.0.2, <=0.1.7) +72 more potentially affected by CVE-2026-28277 via langgraph (>=1.0.0a3, <=1.0.9)

langgraph PYPI version =1.0.0a3, =0.1.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =3.0.3, =0.0.2, =0.0.597, =0.1.4, =1.0.0, =0.1.0, =0.1.8, =0.1.92 and more Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)

langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ai-asset-screener (>=0.1.0, <=0.1.1), meez (>=0.3.0, <=0.3.3) +3 more potentially affected by CVE-2026-28277 via langgraph (0.6.6)

langgraph PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-asset-screener =0.1.0, =0.3.0, =0.1.1a4, =1.6.0, =0.1.0a3, =0.1.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ai-rich (>=0.1.3, <=0.1.5), quorai (>=1.1.0, <=2.2.1) potentially affected by CVE-2026-28277 via langgraph (0.2.56)

langgraph PYPI version 0.2.56 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-rich =0.1.3, =1.1.0, =2.2.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ai-parrot (>=0.5.0, <=0.5.18), langgraph-prebuilt (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.3.0)

langgraph PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-parrot =0.5.0, =0.5.18 - langgraph-prebuilt 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

agentic-kit-eda (0.0.2), agentic-kit-flow (0.0.1) potentially affected by CVE-2026-28277 via langgraph (0.3.16)

langgraph PYPI version 0.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentic-kit-eda 0.0.2 - agentic-kit-flow 0.0.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

osintgraph (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.6.2)

langgraph PYPI version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - osintgraph =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

dialog-lib (>=0.0.1.12, <=0.0.1.18), langchain-postgres (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2026-28277 via langgraph (0.0.32)

langgraph PYPI version 0.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - dialog-lib =0.0.1.12, =0.0.1, =0.1.3, =0.1.17 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ai-parrot (>=0.5.19, <=0.8.2) potentially affected by CVE-2026-28277 via langgraph (0.3.27)

langgraph PYPI version 0.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-parrot =0.5.19, =0.8.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

coshop (>=0.1.0, <=0.1.1), diagram-to-iac (>=0.8.0, <=1.0.5) +6 more potentially affected by CVE-2026-28277 via langgraph (0.4.8)

langgraph PYPI version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - coshop =0.1.0, =0.8.0, =0.1.0, =0.0.11, =0.0.3, =0.0.10 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

miksiai (>=1.0.6, <=1.0.12) potentially affected by CVE-2026-28277 via langgraph (0.0.31)

langgraph PYPI version 0.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - miksiai =1.0.6, =1.0.12 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

bugbug (0.0.595), certora-patrol (>=0.1.3, <=0.1.17) +7 more potentially affected by CVE-2026-28277 via langgraph (0.6.7)

langgraph PYPI version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bugbug 0.0.595 - certora-patrol =0.1.3, =0.1.18, =0.0.2, =0.1.0, =0.1.3, =0.1.4 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

a2a-client-handler (0.1.0), diagram-to-iac (1.19.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.5.1)

langgraph PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - a2a-client-handler 0.1.0 - diagram-to-iac 1.19.0 - meez =0.2.0, =0.2.1, =0.3.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

docugami-langchain (>=0.0.7rc1, <=0.0.7rc6) potentially affected by CVE-2026-28277 via langgraph (0.0.24)

langgraph PYPI version 0.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - docugami-langchain =0.0.7rc1, =0.0.7rc6 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

bisheng-langchain (>=0.3.3.dev1, <=0.3.7.1), bsrag-langchain (0.3.8.3) potentially affected by CVE-2026-28277 via langgraph (0.0.50)

langgraph PYPI version 0.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bisheng-langchain =0.3.3.dev1, =0.3.7.1 - bsrag-langchain 0.3.8.3 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...