CVE-2026-55235
2 advisories.
PyPI/langgraph-api CVE-2026-55235: medium 5.9, EPSS 0.36%
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication
Action: Upgrade langgraph-api to 0.10.0 or later.
pip install langgraph-api==0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-2c9q-c2q9-qgqv
- https://github.com/langchain-ai/helm/security/advisories/GHSA-2c9q-c2q9-qgqv
- https://github.com/langchain-ai/helm
CVE-2026-55235 · published · modified · JSON
PyPI/langgraph-api CVE-2026-55235: medium 5.9, EPSS 0.36%
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication
Action: Upgrade langgraph-api to 0.10.0 or later.
pip install langgraph-api==0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: PYSEC-2026-3857
- https://github.com/langchain-ai/helm/security/advisories/GHSA-2c9q-c2q9-qgqv
- https://github.com/langchain-ai/helm
- https://pypi.org/project/langgraph-api
- https://github.com/advisories/GHSA-2c9q-c2q9-qgqv
- https://nvd.nist.gov/vuln/detail/CVE-2026-55235
CVE-2026-55235 · published · modified · JSON