Malicious code in @langgraphjs/toolkit (npm)

Package collects and sends sensitive system info to a hardcoded server. The package masquerades as a LangGraph JS utility but contains a malicious postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

cuga (0.1.0), minitap-mobile-use (>=0.0.1.dev0, <=2.1.0) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.3.66)

langchain-core PYPI version 0.3.66 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - cuga 0.1.0 - minitap-mobile-use =0.0.1.dev0, =0.2.0, =0.1.0, =0.0.11, =0.0.61 Source cves: CVE-2026-34070 Source advisory:...

cuga (0.1.0), minitap-mobile-use (>=0.0.1.dev0, <=2.1.0) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.3.66)

langchain-core PYPI version 0.3.66 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - cuga 0.1.0 - minitap-mobile-use =0.0.1.dev0, =0.2.0, =0.1.0, =0.0.11, =0.0.61 Source cves: CVE-2026-34070 Source advisory:...

LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks

Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if successfully exploited, could expose filesystem data, environment secrets, and conversation history. Both LangChain and LangGraph are open-source frameworks that are used to build...

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

Deserialization of Untrusted Data

Overview langgraph-checkpoint is a library with base interfaces for LangGraph checkpoint savers. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the msgpack-encoded checkpoints. An attacker can execute arbitrary code by supplying a crafted msgpack-encoded...

Deserialization of Untrusted Data

Overview langgraph is a Building stateful, multi-actor applications with LLMs Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the msgpack-encoded checkpoints. An attacker can execute arbitrary code by supplying a crafted msgpack-encoded payload to the...

agent-nexus-cli (>=0.1.0, <=0.1.31) potentially affected by CVE-2026-28277 via langgraph-checkpoint (4.0.0)

langgraph-checkpoint PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agent-nexus-cli =0.1.0, =0.1.31 Source cves: CVE-2026-28277 Source advisory: SNYK:PYTHON-LANGGRAPHCHECKPOINT-15433491...

adxp-cli (>=0.1.1, <=0.1.21), agent-builder (>=0.0.2, <=0.1.7) +71 more potentially affected by CVE-2026-28277 via langgraph (>=1.0.0a3, <=1.0.9)

langgraph PYPI version =1.0.0a3, =0.1.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =3.0.3, =0.0.2, =0.0.597, =0.1.4, =1.0.0, =0.1.0, =0.1.8, =0.1.92 and more Source cves: CVE-2026-28277 Source advisory: SNYK:PYTHON-LANGGRAPH-15433492...

EUVD-2026-9860

LangGraph checkpoint loading has unsafe msgpack deserialization...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2026-28277 via langgraph (0.2.28)

langgraph PYPI version 0.2.28 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =1.2.13 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

GHSA-G48C-2WQR-H844 LangGraph checkpoint loading has unsafe msgpack deserialization

LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store for example, after a database compromise or other privileged write access to the persistence layer, they can...

LangGraph checkpoint loading has unsafe msgpack deserialization

LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store for example, after a database compromise or other privileged write access to the persistence layer, they can...

converso (0.1.1) potentially affected by CVE-2026-28277 via langgraph (0.0.15)

langgraph PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - converso 0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

docugami-langchain (>=0.0.7rc1, <=0.0.7rc6) potentially affected by CVE-2026-28277 via langgraph (0.0.24)

langgraph PYPI version 0.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - docugami-langchain =0.0.7rc1, =0.0.7rc6 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

algorin-cli (>=0.0.1, <=0.21.0) potentially affected by CVE-2026-28277 via langgraph (0.0.29)

langgraph PYPI version 0.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - algorin-cli =0.0.1, =0.21.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

agentbruno (>=0.0.2, <=0.0.5), bisheng-langchain (>=0.3.0b0, <=0.3.2.2) potentially affected by CVE-2026-28277 via langgraph (0.0.30)

langgraph PYPI version 0.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentbruno =0.0.2, =0.3.0b0, =0.3.2.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

dialog-lib (>=0.0.1.12, <=0.0.1.18), langchain-postgres (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2026-28277 via langgraph (0.0.32)

langgraph PYPI version 0.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - dialog-lib =0.0.1.12, =0.0.1, =0.1.3, =0.1.17 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

gpt-verse (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.0.44)

langgraph PYPI version 0.0.44 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - gpt-verse 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

bisheng-langchain (>=0.3.3.dev1, <=0.3.7.1), bsrag-langchain (0.3.8.3) potentially affected by CVE-2026-28277 via langgraph (0.0.50)

langgraph PYPI version 0.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bisheng-langchain =0.3.3.dev1, =0.3.7.1 - bsrag-langchain 0.3.8.3 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...