PyPI/langgraph CVE-2026-28277: high 7.2, EPSS 4.89%
LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msg
Action: Upgrade langgraph to 1.0.10rc1 or later.
pip install langgraph==1.0.10rc1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.10rc1 | - |
Fixed versions
| 1.0.10rc1 |
Sources
- osv: PYSEC-2026-83
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-g48c-2wqr-h844
CVE-2026-28277 · published · modified · JSON