LangChain AI langgraph

• CVE-2026-118667 Medium 4.3 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests 0.4%
• CVE-2026-115885 Medium 4.1 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output 0.1%
• CVE-2026-115883 Medium 6.0 LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores 0.3%
• CVE-2026-104873 High 7.6 LangGraph SDK custom auth silently ignores actions= on resource decorators 0.3%
• CVE-2026-71433 Medium 5.3 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores 0.4%
• CVE-2026-14742 Low 3.1 langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash 0.2%
• CVE-2026-48775 Medium 6.8 LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading 0.2%
• CVE-2026-28277 Medium 6.8 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading 5.5%
• CVE-2025-67644 High 7.3 LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method 2.3%
• CVE-2025-64439 High 7.4 LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer 0.9%
• CVE-2025-64104 High 7.3 LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore 0.2%