langgraph@1.2.0a7

Building stateful, multi-actor applications with LLMs

latest version

1.2.9

first published

2 years ago

latest version published

4 days ago

licenses detected

MIT
[0,)

View langgraph package health on Snyk (opens in a new tab)

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the langgraph package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
L Authorization Bypass Through User-Controlled Key langgraph is a Building stateful, multi-actor applications with LLMs Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to a key collision in the `default_cache_key()` and `_freeze()` functions of `langgraph/_internal/_cache.py`, where `_freeze()` reduces a non-hashable object to `(type_name, tobytes_output, shape)` and drops distinguishing metadata such as numpy dtype and PIL image mode, size, and palette. An attacker can poison the result cache or obtain another user's cached result by submitting a numpy array or PIL image keyword argument that matches a victim's input byte-for-byte but differs in the dropped metadata, yielding an identical cache key. Exploitation requires the Functional API (`@task` or `@entrypoint`) called with keyword arguments, a `CachePolicy` using the default key function, a non-hashable argument exposing `.tobytes()`, and a shared or persistent cache in a multi-user deployment, while positional arguments are unaffected because a hashable tuple short-circuits the lossy branch. How to fix Authorization Bypass Through User-Controlled Key? A fix was pushed into the `master` branch but not yet published.	[0,)

Authorization Bypass Through User-Controlled Key

langgraph is a Building stateful, multi-actor applications with LLMs

Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to a key collision in the default_cache_key() and _freeze() functions of langgraph/_internal/_cache.py, where _freeze() reduces a non-hashable object to (type_name, tobytes_output, shape) and drops distinguishing metadata such as numpy dtype and PIL image mode, size, and palette. An attacker can poison the result cache or obtain another user's cached result by submitting a numpy array or PIL image keyword argument that matches a victim's input byte-for-byte but differs in the dropped metadata, yielding an identical cache key. Exploitation requires the Functional API (@task or @entrypoint) called with keyword arguments, a CachePolicy using the default key function, a non-hashable argument exposing .tobytes(), and a shared or persistent cache in a multi-user deployment, while positional arguments are unaffected because a hashable tuple short-circuits the lossy branch.

How to fix Authorization Bypass Through User-Controlled Key?

A fix was pushed into the master branch but not yet published.

[0,)

Go back to all versions of this package