langgraph-sdk vulnerabilities
CVEs whose affected-version data names the langgraph-sdk package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-118667Medium· 4.3LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests
▾ Sunlitlanggraph-sdk · langgraph-sdkEPSS 0.39%via OSV
CVE-2026-48776Medium· 4.2LangGraph SDK has unsafe URL path construction
LangGraph SDK has unsafe URL path construction
▾ Sunlitlanggraph-sdk · langgraph-sdkEPSS 0.22%via GHSA