Skip to content

CVE lookup

CVE-2025-64439

Pruva has a verified reproduction for CVE-2025-64439: langgraph-checkpoint: Constructor Deserialization RCE in JsonPlusSerializer. The canonical evidence record is REPRO-2026-00062.

REPRO

REPRO-2026-00062

Package

langgraph-checkpoint · pip

Severity

HIGH

Status

published