| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-28277 | LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading | langchain-ai | langgraph | Medium | 6.8 | 2026-03-05 19:10:37 | Deep Dive |
| CVE-2026-27794 | LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution | langchain-ai | langgraph-checkpoint | Medium | 6.6 | 2026-02-25 16:53:47 | Deep Dive |
| CVE-2025-67644 | LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method | langchain-ai | langgraph | High | 7.3 | 2025-12-10 23:37:36 | Deep Dive |
| CVE-2025-64439 | LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer | langchain-ai | langgraph | 中危 | - | 2025-11-07 20:15:22 | Deep Dive |
| CVE-2025-64104 | LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore | langchain-ai | langgraph | High | 7.3 | 2025-10-29 18:55:06 | Deep Dive |