LangGraph SDK has unsafe URL path construction

Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...

GHSA-W39P-VH2G-G8G5 LangGraph SDK has unsafe URL path construction

Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...

EUVD-2026-37289

LangGraph SDK has unsafe URL path construction...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +341 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: GHSA-W39P-VH2G-G8G5...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +341 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: OSV:GHSA-W39P-VH2G-G8G5...

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

Summary LangGraph's JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond what the application expects, which could in tu...

GHSA-FJQC-HQ36-QH5P LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

Summary LangGraph's JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond what the application expects, which could in tu...

EUVD-2026-37140

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (1.0.12)

langgraph-checkpoint PYPI version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =0.3.0, =0.3.5 Source cves: CVE-2026-48775 Source advisory:...

a2a-client-handler (0.1.0), chemgraph (0.6.0) +7 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.1.0)

langgraph-checkpoint PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - a2a-client-handler 0.1.0 - chemgraph 0.6.0 - chemgraphagent 0.5.0 - coshop =0.1.0, =0.0.12, =0.1.0, =0.0.11, =0.2.1,...

asap-cli (>=0.0.3, <=0.0.4.4), biomni-bridge (>=0.3.1, <=0.3.3) +1 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.1.1)

langgraph-checkpoint PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - asap-cli =0.0.3, =0.3.1, =0.3.3 - quivr-modified-milvus 0.1.0 Source cves: CVE-2026-48775 Source advisory:...

abs-langchain-suite (>=0.2.1, <=0.3.1), adxp-cli (>=0.1.1, <=0.1.21) +147 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (3.0.1)

langgraph-checkpoint PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - abs-langchain-suite =0.2.1, =0.1.1, =0.0.1a1, =2.1.7, =0.0.2, =1.3.9, =0.1.3, =0.1.0, =0.6.0, =0.2.0, =0.1.0, =1.0.0,...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +6 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (>=4.0.0, <=4.1.0)

langgraph-checkpoint PYPI version =4.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.16, =4.1.2, =0.1.5, =0.1.0, =0.1.3 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

kgraphplanner (0.0.2) potentially affected by CVE-2026-48775 via langgraph-checkpoint (1.0.2)

langgraph-checkpoint PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner 0.0.2 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

autonomous-agent (0.0.1), tolstoy-agents (>=0.1.29, <=0.1.49) potentially affected by CVE-2026-48775 via langgraph-checkpoint (1.0.8)

langgraph-checkpoint PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - autonomous-agent 0.0.1 - tolstoy-agents =0.1.29, =0.1.49 Source cves: CVE-2026-48775 Source advisory:...

kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-48775 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

brickllm (>=1.0.0, <=1.3.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (1.0.14)

langgraph-checkpoint PYPI version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - brickllm =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-48775...

mafiagg (1.0.4) potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.0.6)

langgraph-checkpoint PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mafiagg 1.0.4 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.0.10)

langgraph-checkpoint PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...