← Packages
python-langgraph
Stateful graph framework for building agents
- Current
- 1.2.4
- Candidate
- 1.2.20Stale
- License
- MIT
RuntimeDeps
| Dependency | Observed source | Current requirement | Candidate requirement |
|---|---|---|---|
1.4.6 | |||
4.1.1 | |||
1.1.0 | |||
0.4.11 | |||
2.12.5 | |||
3.6.0 | |||
3.14.9 |
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsOSV
- Fixed events
- 1.2.14OSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.394%FIRST
- Returned advisory
- GHSA-3fx2-cqw9-xr3cOSV
- Aliases
- GHSA-3fx2-cqw9-xr3cOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NOSV
Description
LangGraph is a framework for building long-running, stateful agent workflows.
Changelog
PR · 1
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-11T07:29:19+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Checked Compared same-provider, same-project SPDX metadata for this version pair. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Checked |