GHSA lookup
GHSA-WWQV-P2PP-99H5
Pruva has a verified reproduction for GHSA-WWQV-P2PP-99H5: langgraph-checkpoint: Constructor Deserialization RCE in JsonPlusSerializer. The canonical evidence record is REPRO-2026-00062.
REPRO
REPRO-2026-00062
Package
langgraph-checkpoint · pip
Severity
HIGH
Status
published