CVE-2026-48776

3 advisories.

PyPI/langgraph-sdk CVE-2026-48776: medium 4.2

LangGraph SDK has unsafe URL path construction

Action: Upgrade langgraph-sdk to 0.3.15 or later.

pip install langgraph-sdk==0.3.15

Affected

introduced	fixed	last affected
0	0.3.15	-

Fixed versions

0.3.15

Sources

CVE-2026-48776 · published 2026-06-25T18:32:35Z · modified 2026-07-21T15:15:50.659527533Z · JSON

PyPI/langgraph CVE-2026-48776: critical 9.1

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path constructi

Action: Upgrade langgraph to 0.3.15 or later.

pip install langgraph==0.3.15

Affected

introduced	fixed	last affected
0	0.3.15	-

Fixed versions

0.3.15

Sources

CVE-2026-48776 · published 2026-06-17T10:55:15.113Z · modified 2026-07-13T16:42:27.619863658Z · JSON

PyPI/langgraph-sdk CVE-2026-48776: medium 4.2

LangGraph SDK has unsafe URL path construction

Action: Upgrade langgraph-sdk to 0.3.15 or later.

pip install langgraph-sdk==0.3.15

Affected

introduced	fixed	last affected
0	0.3.15	-

Fixed versions

0.3.15

Sources

CVE-2026-48776 · published 2026-07-13T15:46:23.821702Z · modified 2026-07-13T16:42:27.619863658Z · JSON