langgraph-checkpoint vulnerabilities
CVEs whose affected-version data names the langgraph-checkpoint package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-48775Medium· 6.8LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
▾ Sunlitlanggraph-checkpoint · langgraph-checkpointEPSS 0.23%via GHSA
CVE-2025-64439HighLangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
▾ Twilightlanggraph-checkpoint · langgraph-checkpointEPSS 0.89%via OSV