Vulnerabilities for langgraph-api

First version without a known vulnerability: 0.11.0.dev1

Details

• GHSA-jfj5-wrj9-63x42026-08-19

  langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

  Fixed in: 0.10.0

• GHSA-2c9q-c2q9-qgqv2026-08-19

  langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

  Fixed in: 0.10.0