mafiagg (1.0.4) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.6)

langgraph-checkpoint PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mafiagg 1.0.4 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.2)

langgraph-checkpoint PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

kgraphplanner (>=0.0.12, <=0.0.13) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.7)

langgraph-checkpoint PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.12, =0.0.13 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.8)

langgraph-checkpoint PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.20)

langgraph-checkpoint PYPI version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mcp-hybrid-search =1.1.2, =1.1.7 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

GHSA-WWQV-P2PP-99H5 LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Summary Prior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a remote code execution RCE vulnerability when deserializing payloads saved in the "json" serialization mode. If an attacker can cause your...

kgraphplanner (0.0.2) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.2)

langgraph-checkpoint PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner 0.0.2 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

brickllm (>=1.0.0, <=1.3.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.14)

langgraph-checkpoint PYPI version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - brickllm =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.3 Source cves: CVE-2025-64439...

autonomous-agent (0.0.1), tolstoy-agents (>=0.1.29, <=0.1.49) potentially affected by CVE-2025-64439 via langgraph-checkpoint (1.0.8)

langgraph-checkpoint PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - autonomous-agent 0.0.1 - tolstoy-agents =0.1.29, =0.1.49 Source cves: CVE-2025-64439 Source advisory:...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.10)

langgraph-checkpoint PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

agentiacap (>=0.1.31, <=0.1.37) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.16)

langgraph-checkpoint PYPI version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentiacap =0.1.31, =0.1.37 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

baicai-base (0.1.2), baicai-tutor (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.25)

langgraph-checkpoint PYPI version 2.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

agentfoundry (1.2.9.1), py-agent-search (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.26)

langgraph-checkpoint PYPI version 2.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentfoundry 1.2.9.1 - py-agent-search =1.0.0, =0.1.0, =1.3.41 Source cves: CVE-2025-64439 Source advisory:...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...

a2a-client-handler (0.1.0), chemgraph (0.6.0) +7 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.0)

langgraph-checkpoint PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - a2a-client-handler 0.1.0 - chemgraph 0.6.0 - chemgraphagent 0.5.0 - coshop =0.1.0, =0.0.12, =0.1.0, =0.0.11, =0.2.1,...

asap-cli (>=0.0.3, <=0.0.4.4), biomni-bridge (>=0.3.1, <=0.3.3) +1 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.1)

langgraph-checkpoint PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - asap-cli =0.0.3, =0.3.1, =0.3.3 - quivr-modified-milvus 0.1.0 Source cves: CVE-2025-64439 Source advisory:...

abs-langchain-suite (>=0.1.5, <=0.2.0), actava (0.1.1) +235 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.2)

langgraph-checkpoint PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - abs-langchain-suite =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.2, =0.1.25 -...

chainlite (>=0.3.6, <=0.3.7), quivr-modified-milvus (0.1.1) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.1)

langgraph-checkpoint PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - chainlite =0.3.6, =0.3.7 - quivr-modified-milvus 0.1.1 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-9...

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Summary Prior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a remote code execution RCE vulnerability when deserializing payloads saved in the "json" serialization mode. If an attacker can cause your...