kgraphplanner (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-27794 via langgraph-checkpoint (1.0.13)

langgraph-checkpoint PYPI version 1.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.3, =0.0.11 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

Context A Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache backends that inherit from BaseCache and opt nodes into caching via CachePolicy. Prior to langgraph-checkpoint 4.0.0, BaseCache defaults to JsonPlusSerializerpicklefallback=True. When...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.2)

langgraph-checkpoint PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

brickllm (>=1.0.0, <=1.3.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +11 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (1.0.14)

langgraph-checkpoint PYPI version 1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - brickllm =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =0.2.3 Source cves: CVE-2026-27794...

gtm-onepint (1.2.14), gtm-onepintai (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (1.0.12)

langgraph-checkpoint PYPI version 1.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - gtm-onepint 1.2.14 - gtm-onepintai =1.0.0, =1.0.9, =0.3.0, =0.3.5 Source cves: CVE-2026-27794 Source advisory:...

readet (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.8)

langgraph-checkpoint PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - readet =0.1.0, =0.1.1 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.20)

langgraph-checkpoint PYPI version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mcp-hybrid-search =1.1.2, =1.1.7 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

netdata-llm-agent (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.10)

langgraph-checkpoint PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - netdata-llm-agent =0.3.0, =0.4.0 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

mafiagg (1.0.4) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.6)

langgraph-checkpoint PYPI version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - mafiagg 1.0.4 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

autonomous-agent (0.0.1), tolstoy-agents (>=0.1.29, <=0.1.49) potentially affected by CVE-2026-27794 via langgraph-checkpoint (1.0.8)

langgraph-checkpoint PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - autonomous-agent 0.0.1 - tolstoy-agents =0.1.29, =0.1.49 Source cves: CVE-2026-27794 Source advisory:...

GHSA-MHR3-J7M5-C7C9 LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

Context A Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache backends that inherit from BaseCache and opt nodes into caching via CachePolicy. Prior to langgraph-checkpoint 4.0.0, BaseCache defaults to JsonPlusSerializerpicklefallback=True. When...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

agentfoundry (1.2.9.1), py-agent-search (>=1.0.0, <=1.0.2) +1 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.26)

langgraph-checkpoint PYPI version 2.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentfoundry 1.2.9.1 - py-agent-search =1.0.0, =0.1.0, =1.3.41 Source cves: CVE-2026-27794 Source advisory:...

agentiacap (>=0.1.31, <=0.1.37) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.16)

langgraph-checkpoint PYPI version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - agentiacap =0.1.31, =0.1.37 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

coze-coding-utils (0.2.0), langchain-timbr (>=2.1.11, <=3.3.0) +1 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (3.0.0)

langgraph-checkpoint PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - coze-coding-utils 0.2.0 - langchain-timbr =2.1.11, =0.3.2, =0.4.1 Source cves: CVE-2026-27794 Source advisory:...

abs-langchain-suite (>=0.1.5, <=0.2.0), actava (0.1.1) +235 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.1.2)

langgraph-checkpoint PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - abs-langchain-suite =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.2, =0.1.25 -...

a2a-client-handler (0.1.0), chemgraph (0.6.0) +7 more potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.1.0)

langgraph-checkpoint PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - a2a-client-handler 0.1.0 - chemgraph 0.6.0 - chemgraphagent 0.5.0 - coshop =0.1.0, =0.0.12, =0.1.0, =0.0.11, =0.2.1,...

baicai-base (0.1.2), baicai-tutor (0.1.0) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.25)

langgraph-checkpoint PYPI version 2.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

kgraphplanner (0.0.2) potentially affected by CVE-2026-27794 via langgraph-checkpoint (1.0.2)

langgraph-checkpoint PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner 0.0.2 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

kgraphplanner (>=0.0.12, <=0.0.13) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.7)

langgraph-checkpoint PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - kgraphplanner =0.0.12, =0.0.13 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...