{"data":{"id":"eeb76820-77ae-489f-8c31-22c9f65cc42c","title":"GHSA-wwqv-p2pp-99h5: LangGraph Checkpoint affected by RCE in \"json\" mode of JsonPlusSerializer ","summary":"Prior to langgraph-checkpoint version 3.0, the JsonPlusSerializer used as the default checkpoint serializer contains a remote code execution flaw when deserializing payloads saved in the \"json\" mode. An attacker who can get the application to persist a crafted payload in that mode can run arbitrary Python code on load, and the fallback to \"json\" can be triggered when surrogate values make msgpack serialization fail.","solution":"Fixed in langgraph-checkpoint==3.0.0. Upgrade immediately to langgraph-checkpoint==3.0.0. For langgraph-api deployments, any version 0.5 or later is also free of this vulnerability.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wwqv-p2pp-99h5","publishedAt":"2025-11-05T19:52:50.000Z","cveId":"CVE-2025-64439","cweIds":["CWE-502"],"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langgraph-checkpoint@< 3.0.0 (fixed: 3.0.0)"],"affectedPackageNames":["langgraph-checkpoint"],"affectedPackageRefs":["pypi:langgraph-checkpoint"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","langgraph-checkpoint","JsonPlusSerializer"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00887,"epssCheckedAt":"2026-10-10T04:57:16.317Z","kevDateAdded":null,"advisoryAliases":["GHSA-wwqv-p2pp-99h5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2025-11-05T19:52:50.000Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}