langgraph-checkpoint (pypi) has 3 known vulnerabilities, the worst rated HIGH. Upgrade to 4.1.1 or later to clear all of them. No malicious-package signal is recorded.
Prior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer (used as the default serialization protocol for all checkpointing) contains a remote…
// questionsIs langgraph-checkpoint safe to install?
CyberXYZ does not call a package safe in absolute terms. It records 3 known vulnerabilities for langgraph-checkpoint (pypi), the worst rated HIGH, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does langgraph-checkpoint have known vulnerabilities?
Yes. CyberXYZ records 3 known vulnerabilities for langgraph-checkpoint (pypi), the worst rated HIGH. They are GHSA-wwqv-p2pp-99h5, GHSA-fjqc-hq36-qh5p, GHSA-mhr3-j7m5-c7c9.
Which version of langgraph-checkpoint should I use?
4.1.1 or later clears every advisory recorded for langgraph-checkpoint (pypi). Check the release you pick before installing it.
How do I check langgraph-checkpoint before installing?
Search langgraph-checkpoint in CyberXYZ Check at https://cyberxyz.io/check?q=langgraph-checkpoint. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 12:38 UTC. The most recent advisory here was published 2026-06-25. Updated continuously from NVD, GHSA, OSV and CNA feeds.