LA
Product
langgraph
11
CVEs
0
On KEV
7.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add langgraph to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67644 | 7.8 | Dec 10 | LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method Affected: < 3.0.1 |
| CVE-2026-104873 | 7.6 | Oct 2 | LangGraph SDK custom auth silently ignores actions= on resource decorators Affected: >= 0.1.45, < 0.4.4 |
| CVE-2025-64439 | 7.4 | Nov 7 | LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer Affected: < 3.0.0 |
| CVE-2025-64104 | 7.3 | Oct 29 | LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore Affected: < 2.0.11 |
| CVE-2026-28277 | 7.2 | Mar 5 | LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading Affected: <= 1.0.9 |
Showing 5