{"data":{"ecosystem":"pypi","name":"langgraph","url":"https://aisecwatch.com/packages/pypi/langgraph","latestVersion":"1.2.14","firstReleaseAt":"2024-01-08T16:30:59.571Z","repository":"https://github.com/langchain-ai/langgraph/tree/main/libs/langgraph","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-01-08T16:30:59.571Z","integratedVersion":"0.0.9","sdks":["langgraph"],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"langchain-core","versionSpec":"<2,>=1.4.7","scope":"runtime"},{"ecosystem":"pypi","name":"langgraph-checkpoint","versionSpec":"<5.0.0,>=4.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"langgraph-prebuilt","versionSpec":"<1.2.0,>=1.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"langgraph-sdk","versionSpec":"<0.5.0,>=0.4.6","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic","versionSpec":">=2.7.4","scope":"runtime"},{"ecosystem":"pypi","name":"xxhash","versionSpec":">=3.5.0","scope":"runtime"}],"advisories":[{"id":"08ad94e2-e94b-4f60-b105-58f83cccd2c2","url":"https://aisecwatch.com/issues/08ad94e2-e94b-4f60-b105-58f83cccd2c2","cveId":"CVE-2026-28277","title":"GHSA-g48c-2wqr-h844: LangGraph checkpoint loading has unsafe msgpack deserialization","headline":null,"severity":"medium","publishedAt":"2026-03-05T20:19:49.000Z","affected":["langgraph@<= 1.0.9"],"epssScore":0.00699}],"checkedAt":"2026-10-09T21:49:01.841Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}