LA
Product
langgraph
11
CVEs
0
On KEV
7.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 5Medium 5Low 1
Watch
Add langgraph to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48775 | 6.8 | Jun 16 | LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading Affected: < 1.2.2 |
| CVE-2026-115883 New | 6.0 | Oct 23 | LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores Affected: < 1.2.15 |
| CVE-2026-71433 | 5.3 | Aug 6 | LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores Affected: < 3.1.1 |
| CVE-2026-118667 New | 4.3 | Oct 28 | LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests Affected: >= 1.2.3, < 1.2.14 |
| CVE-2026-115885 New | 4.1 | Oct 23 | LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output Affected: >= 0.4.15, < 0.4.32 |
Showing 5