Lucene search
+L

7 matches found

Veracode
Veracode
•added 2026/10/29 3:05 a.m.•9 views

LangGraph: Unencoded Identifiers In LangGraph SDK V3 Streaming Can Redirect Authenticated GET Requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied "threadid" and "assistantid" values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another pat...

4.3CVSS5.7AI score0.00394EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder