agentstr-sdk (>=0.6.4, <=0.6.8), chemgraph (0.6.0) +7 more potentially affected by CVE-2026-28277 via langgraph (0.4.7)

langgraph PYPI version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - agentstr-sdk =0.6.4, =0.2.0, =0.1.0, =0.1.1, =1.0.0, =0.0.3, =0.1.0a4, =0.1.0a5 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

coshop (>=0.1.0, <=0.1.1), diagram-to-iac (>=0.8.0, <=1.0.5) +6 more potentially affected by CVE-2026-28277 via langgraph (0.4.8)

langgraph PYPI version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - coshop =0.1.0, =0.8.0, =0.1.0, =0.0.11, =0.0.3, =0.0.10 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

diagram-to-iac (1.0.6) potentially affected by CVE-2026-28277 via langgraph (0.4.9)

langgraph PYPI version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - diagram-to-iac 1.0.6 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ag-ui-langgraph (>=0.0.1a1, <=0.0.4), copilotkit (>=0.1.52a1, <=0.1.57) +6 more potentially affected by CVE-2026-28277 via langgraph (0.5.0)

langgraph PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ag-ui-langgraph =0.0.1a1, =0.1.52a1, =1.4.0, =0.3.0, =0.1.18, =0.0.1.dev0, =0.1.0a1, =1.2.0, =1.5.0 Source cves: CVE-2026-28277 Source advisor...

a2a-client-handler (0.1.0), diagram-to-iac (1.19.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.5.1)

langgraph PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - a2a-client-handler 0.1.0 - diagram-to-iac 1.19.0 - meez =0.2.0, =0.2.1, =0.3.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

cuga (0.1.0), katalyst (0.9.1) +1 more potentially affected by CVE-2026-28277 via langgraph (0.5.3)

langgraph PYPI version 0.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - cuga 0.1.0 - katalyst 0.9.1 - meez =0.2.11, =0.2.14 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

abs-langchain-suite (>=0.1.5, <=0.2.0), agentc-langgraph (>=0.2.5a2, <=1.1.0) +18 more potentially affected by CVE-2026-28277 via langgraph (0.5.4)

langgraph PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - abs-langchain-suite =0.1.5, =0.2.5a2, =1.25.1, =1.0.0, =0.1.0a2, =1.0.0b3, =1.3.0, =0.1.1, =0.1.0, =0.1.28a6, =0.2.13, =0.1.17, =0.0.8, =0.2.0...

meez (0.2.16) potentially affected by CVE-2026-28277 via langgraph (0.6.0)

langgraph PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - meez 0.2.16 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)

langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ai-asset-screener (>=0.1.0, <=0.1.1), meez (>=0.3.0, <=0.3.3) +3 more potentially affected by CVE-2026-28277 via langgraph (0.6.6)

langgraph PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ai-asset-screener =0.1.0, =0.3.0, =0.1.1a4, =1.6.0, =0.1.0a3, =0.1.2 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

bugbug (0.0.596), langchain-timbr (>=2.1.0, <=2.1.10) potentially affected by CVE-2026-28277 via langgraph (0.6.8)

langgraph PYPI version 0.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - bugbug 0.0.596 - langchain-timbr =2.1.0, =2.1.10 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

chat-cvdpm (>=0.1.7, <=0.1.13), codeviewx (0.2.8) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.10)

langgraph PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - chat-cvdpm =0.1.7, =0.1.1, =0.1.7 - iflow-mcp-kerwinmai-multi-agent-exp 2.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

CVE-2026-28277 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

CVE-2026-28277

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

CVE-2026-28277 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

CVE-2026-28277

CVE-2026-28277 affects LangGraph checkpoint loading using an SQLite-backed checkpoint store. In versions ≤1.0.9, msgpack-encoded checkpoints may deserialize into Python objects, enabling an attacker with write access to the checkpoint store to craft payloads that trigger unsafe reconstruction whe...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +404 more potentially affected by CVE-2026-28277 via langgraph (>=0.0.15, <=1.0.9)

langgraph PYPI version =0.0.15, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.0.1, =0.1.1, =0.1.0, =0.0.2, =0.2.0a1, =0.2.0a3 and more Source cves: CVE-2026-28277 Source advisory: MEND:CVE-2026-28277...

CVE-2026-28277 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

langgraph code issue vulnerability

Langgraph is a large-scale model framework developed by LangChain. Versions of Langgraph 1.0.9 and earlier contained code vulnerabilities. These vulnerabilities stemmed from the possibility of re-creating Python objects during deserialization, which could lead to insecure object reconstruction...

CVE-2026-28277: Deserialization of Untrusted Data

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...