langgraph-checkpoint vulnerabilities
CVEs whose affected-version data names the langgraph-checkpoint package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-48775Medium· 6.8LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
▾ Sunlitlanggraph-checkpoint · langgraph-checkpointEPSS 0.23%via GHSA
CVE-2026-27794Medium· 6.6LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
▾ Sunlitlanggraph-checkpoint · langgraph-checkpointEPSS 0.70%via OSV
CVE-2025-64439HighLangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
▾ Twilightlanggraph-checkpoint · langgraph-checkpointEPSS 0.88%via OSV