Vulnerabilities for langgraph-checkpoint

First version without a known vulnerability: 4.1.1

Details

• GHSA-fjqc-hq36-qh5p2026-06-25

  LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

  Fixed in: 4.1.1

• GHSA-mhr3-j7m5-c7c92026-02-25

  LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

  Fixed in: 4.0.0

• GHSA-wwqv-p2pp-99h52025-11-05

  LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

  Fixed in: 3.0.0