CVE-2025-64439
2 advisories.
PyPI/langgraph-checkpoint CVE-2025-64439: high, EPSS 0.89%
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
Action: Upgrade langgraph-checkpoint to 3.0.0 or later.
pip install langgraph-checkpoint==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-wwqv-p2pp-99h5
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-wwqv-p2pp-99h5
- https://nvd.nist.gov/vuln/detail/CVE-2025-64439
- https://github.com/langchain-ai/langgraph/commit/c5744f583b11745cd406f3059903e17bbcdcc8ac
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/blob/c5744f583b11745cd406f3059903e17bbcdcc8ac/libs/checkpoint/langgraph/checkpoint/serde/jsonplus.py
- https://github.com/langchain-ai/langgraph/releases/tag/checkpoint%3D%3D3.0.0
CVE-2025-64439 · published · modified · JSON
PyPI/langgraph-checkpoint CVE-2025-64439: unknown, EPSS 0.89%
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
Action: Upgrade langgraph-checkpoint to 3.0.0 or later.
pip install langgraph-checkpoint==3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: PYSEC-2026-1527
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-wwqv-p2pp-99h5
- https://nvd.nist.gov/vuln/detail/CVE-2025-64439
- https://github.com/langchain-ai/langgraph/commit/c5744f583b11745cd406f3059903e17bbcdcc8ac
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/blob/c5744f583b11745cd406f3059903e17bbcdcc8ac/libs/checkpoint/langgraph/checkpoint/serde/jsonplus.py
- https://github.com/langchain-ai/langgraph/releases/tag/checkpoint%3D%3D3.0.0
- https://pypi.org/project/langgraph-checkpoint
- https://github.com/advisories/GHSA-wwqv-p2pp-99h5
CVE-2025-64439 · published · modified · JSON