langgraph-api vulnerabilities

CVEs whose affected-version data names the langgraph-api package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-118668High

yesterday

LangGraph JavaScript custom authentication may permit cross-user Store access

▾ Twilightlanggraph-api · langgraph-apiEPSS 0.37%via OSV

CVE-2026-55236Medium· 5.9

1mo ago

langgraph-api implements the LangGraph API for rapid development and testing

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value inste…

▾ Sunlitlangchain-ai · langgraph-apiEPSS 0.26%via NVD

CVE-2026-55235Medium· 5.9

1mo ago

langgraph-api implements the LangGraph API for rapid development and testing

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is delivered through an in-process loopback transport, and the a…

▾ Sunlitlanggraph-api · langgraph-apiEPSS 0.36%via NVD