Important: containerd

Issue Overview: Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution NOTE:...

EUVD-2026-9860

LangGraph checkpoint loading has unsafe msgpack deserialization...

Tencent PatrickStar 代码问题漏洞

Tencent PatrickStar is a distributed deep learning training framework from Tencent China. A code issue vulnerability exists in Tencent PatrickStar that stems from a lack of validation of user-supplied data in the mergecheckpoint endpoint, which could lead to deserialization of untrusted data and...

CVE-2025-64439

CVE-2025-64439 : LangGraph SQLite Checkpoint uses JsonPlusSerializer (default for all checkpointing) with a potential RCE when deserializing payloads saved in the json mode. Prior to 3.0.0, if Unicode surrogate values caused serialization to fail, it could fall back to json, enabling deserializat...