PyPI/langgraph-sdk CVE-2026-48776: medium 4.2, EPSS 0.29%
LangGraph SDK has unsafe URL path construction
Action: Upgrade langgraph-sdk to 0.3.15 or later.
pip install langgraph-sdk==0.3.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.15 | - |
Fixed versions
| 0.3.15 |
Sources
- osv: PYSEC-2026-2575
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-w39p-vh2g-g8g5
- https://nvd.nist.gov/vuln/detail/CVE-2026-48776
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.3.15
- https://pypi.org/project/langgraph-sdk
- https://github.com/advisories/GHSA-w39p-vh2g-g8g5
CVE-2026-48776 · published · modified · JSON