{"id":"ROOT-APP-PYPI-CVE-2026-48775","summary":"CVE-2026-48775 in langgraph-checkpoint - Patched by Root","details":"Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available.","modified":"2026-08-05T12:30:16.578919386Z","published":"2026-08-05T10:13:46Z","upstream":["CVE-2026-48775"],"database_specific":{"distro":"pypi","distro_version":"","severity":"MEDIUM","source":"Root"},"affected":[{"package":{"name":"langgraph-checkpoint","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3+aikido.1"},{"fixed":"4.1.0+aikido.1"},{"fixed":"4.0.2+aikido.1"},{"fixed":"4.0.1+aikido.1"},{"fixed":"4.0.3+aikido.2"},{"fixed":"4.1.0+aikido.2"},{"fixed":"4.0.2+aikido.2"}]}],"database_specific":{"all_fixed_versions":["4.0.3+aikido.1","4.1.0+aikido.1","4.0.2+aikido.1","4.0.1+aikido.1","4.0.3+aikido.2","4.1.0+aikido.2","4.0.2+aikido.2"],"root_patch_version":"aikido.2","root_patched":true,"total_fixed_versions":7,"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-48775.json","upstream_version":"4.0.2"}},{"package":{"name":"rootio-langgraph-checkpoint","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3+root.io.1"},{"fixed":"4.1.0+root.io.1"},{"fixed":"4.0.2+root.io.1"}]}],"database_specific":{"upstream_version":"4.0.2","all_fixed_versions":["4.0.3+root.io.1","4.1.0+root.io.1","4.0.2+root.io.1"],"root_patch_version":"root.io.1","root_patched":true,"total_fixed_versions":3,"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-48775.json"}}],"schema_version":"1.8.0"}