bsrag-langchain (0.3.8.0), codemutator (>=0.0.9, <=0.0.22) +2 more potentially affected by CVE-2026-28277 via langgraph (0.0.51)

langgraph PYPI version 0.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bsrag-langchain 0.3.8.0 - codemutator =0.0.9, =0.5.0, =0.5.2 - easyrag 0.0.1 Source cves: CVE-2026-28277 Source advisory:...

aiagentgraph (>=0.0.1, <=0.0.4a1) potentially affected by CVE-2026-28277 via langgraph (0.0.53)

langgraph PYPI version 0.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagentgraph =0.0.1, =0.0.4a1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

autonomous-agent (0.0.1), kgraphplanner (0.0.2) potentially affected by CVE-2026-28277 via langgraph (0.2.3)

langgraph PYPI version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - autonomous-agent 0.0.1 - kgraphplanner 0.0.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

langchain-pangu (>=0.1.1, <=0.2.3), tolstoy-agents (>=0.1.29, <=0.1.49) +1 more potentially affected by CVE-2026-28277 via langgraph (0.2.16)

langgraph PYPI version 0.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - langchain-pangu =0.1.1, =0.1.29, =0.2.2, =0.3.5 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

scrapontologies (0.0.2) potentially affected by CVE-2026-28277 via langgraph (0.2.30)

langgraph PYPI version 0.2.30 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - scrapontologies 0.0.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

enable-ai (>=0.1.0, <=0.4.1), freiburg-ris-ca (0.1.0) +1 more potentially affected by CVE-2026-28277 via langgraph (0.2.31)

langgraph PYPI version 0.2.31 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - enable-ai =0.1.0, =0.4.1 - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

myscalekb-agent-base (>=0.0.1, <=0.1.6), originhub-myscalekb-agent-base (>=0.1.8, <=0.2.0) potentially affected by CVE-2026-28277 via langgraph (0.2.35)

langgraph PYPI version 0.2.35 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - myscalekb-agent-base =0.0.1, =0.1.8, =0.2.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

nodeology (0.0.3), terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-28277 via langgraph (0.2.45)

langgraph PYPI version 0.2.45 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - nodeology 0.0.3 - terminaider =0.1.1, =0.1.3 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

carton-mcp (>=0.1.80, <=0.1.83), cave-harness (0.1.0) +7 more potentially affected by CVE-2026-28277 via langgraph (0.2.60)

langgraph PYPI version 0.2.60 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.4.0, =0.1.3, =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

graphtomation (0.0.5), lang2sql (>=0.1.0, <=0.1.9) potentially affected by CVE-2026-28277 via langgraph (0.2.62)

langgraph PYPI version 0.2.62 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - graphtomation 0.0.5 - lang2sql =0.1.0, =0.1.9 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

droughty (>=0.16.0, <=0.19.0) potentially affected by CVE-2026-28277 via langgraph (0.2.64)

langgraph PYPI version 0.2.64 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - droughty =0.16.0, =0.19.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

aiagents4pharma (>=1.8.2, <=1.23.0) potentially affected by CVE-2026-28277 via langgraph (0.2.66)

langgraph PYPI version 0.2.66 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - aiagents4pharma =1.8.2, =1.23.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-28277 via langgraph (0.2.69)

langgraph PYPI version 0.2.69 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

synforge (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.2.74)

langgraph PYPI version 0.2.74 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - synforge 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ai-parrot (>=0.5.0, <=0.5.18), langgraph-prebuilt (0.1.0) potentially affected by CVE-2026-28277 via langgraph (0.3.0)

langgraph PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-parrot =0.5.0, =0.5.18 - langgraph-prebuilt 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ap-rest-client (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-28277 via langgraph (0.3.2)

langgraph PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.1, =0.0.5 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

agentic-kit-eda (0.0.2), agentic-kit-flow (0.0.1) potentially affected by CVE-2026-28277 via langgraph (0.3.16)

langgraph PYPI version 0.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentic-kit-eda 0.0.2 - agentic-kit-flow 0.0.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

pdd-cli (>=0.0.22, <=0.0.25) potentially affected by CVE-2026-28277 via langgraph (0.3.25)

langgraph PYPI version 0.3.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - pdd-cli =0.0.22, =0.0.25 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ai-parrot (>=0.5.19, <=0.8.2) potentially affected by CVE-2026-28277 via langgraph (0.3.27)

langgraph PYPI version 0.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-parrot =0.5.19, =0.8.2 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

planning-library (0.1.4) potentially affected by CVE-2026-28277 via langgraph (0.0.26)

langgraph PYPI version 0.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - planning-library 0.1.4 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...