EUVD-2026-9860

LangGraph checkpoint loading has unsafe msgpack deserialization...

Tencent PatrickStar 代码问题漏洞

Tencent PatrickStar is a distributed deep learning training framework from Tencent China. A code issue vulnerability exists in Tencent PatrickStar that stems from a lack of validation of user-supplied data in the mergecheckpoint endpoint, which could lead to deserialization of untrusted data and...

CVE-2025-64439

CVE-2025-64439 : LangGraph SQLite Checkpoint uses JsonPlusSerializer (default for all checkpointing) with a potential RCE when deserializing payloads saved in the json mode. Prior to 3.0.0, if Unicode surrogate values caused serialization to fail, it could fall back to json, enabling deserializat...