langgraph-api Vulnerability: Relative Webhook Targets Bypass Authentication

Severity

HIGH

Affected component

langgraph-api (pypi)

Affected versions

< 0.10.0 or >= 0.0.1, <= 0.0.1 or >= 0.0.10, <= 0.0.10 or >= 0.0.11, <= 0.0.11 or >= 0.0.12, <= 0.0.12 or >= 0.0.13, <= 0.0.13 or >= 0.0.14, <= 0.0.14 or >= 0.0.15, <= 0.0.15 or >= 0.0.16, <= 0.0.16 or >= 0.0.17, <= 0.0.17 or >= 0.0.18, <= 0.0.18 or >= 0.0.19, <= 0.0.19 or >= 0.0.2, <= 0.0.2 or >= 0.0.20, <= 0.0.20 or >= 0.0.21, <= 0.0.21 or >= 0.0.22, <= 0.0.22 or >= 0.0.23, <= 0.0.23 or >= 0.0.24, <= 0.0.24 or >= 0.0.25, <= 0.0.25 or >= 0.0.26, <= 0.0.26 or >= 0.0.27, <= 0.0.27 or >= 0.0.28, <= 0.0.28 or >= 0.0.28rc1, <= 0.0.28rc1 or >= 0.0.3, <= 0.0.3 or >= 0.0.30, <= 0.0.30 or >= 0.0.31, <= 0.0.31 or >= 0.0.32, <= 0.0.32 or >= 0.0.33, <= 0.0.33 or >= 0.0.34, <= 0.0.34 or >= 0.0.36, <= 0.0.36 or >= 0.0.37, <= 0.0.37 or >= 0.0.38, <= 0.0.38 or >= 0.0.39, <= 0.0.39 or >= 0.0.4, <= 0.0.4 or >= 0.0.40, <= 0.0.40 or >= 0.0.41, <= 0.0.41 or >= 0.0.42, <= 0.0.42 or >= 0.0.43, <= 0.0.43 or >= 0.0.44, <= 0.0.44 or >= 0.0.45, <= 0.0.45 or >= 0.0.46, <= 0.0.46 or >= 0.0.47, <= 0.0.47 or >= 0.0.48, <= 0.0.48 or >= 0.0.5, <= 0.0.5 or >= 0.0.6, <= 0.0.6 or >= 0.0.7, <= 0.0.7 or >= 0.0.8, <= 0.0.8 or >= 0.0.9, <= 0.0.9 or >= 0.1.0, <= 0.1.0 or >= 0.1.12, <= 0.1.12 or >= 0.1.13, <= 0.1.13 or >= 0.1.14, <= 0.1.14 or >= 0.1.15, <= 0.1.15 or >= 0.1.16, <= 0.1.16 or >= 0.1.17, <= 0.1.17 or >= 0.1.18, <= 0.1.18 or >= 0.1.2, <= 0.1.2 or >= 0.1.20, <= 0.1.20 or >= 0.1.21, <= 0.1.21 or >= 0.1.22, <= 0.1.22 or >= 0.1.23, <= 0.1.23 or >= 0.1.3, <= 0.1.3 or >= 0.1.4, <= 0.1.4 or >= 0.1.5, <= 0.1.5 or >= 0.1.6, <= 0.1.6 or >= 0.1.7, <= 0.1.7 or >= 0.1.8, <= 0.1.8 or >= 0.1.9, <= 0.1.9 or >= 0.10.0rc1, <= 0.10.0rc1 or >= 0.10.0rc2, <= 0.10.0rc2 or >= 0.10.0rc3, <= 0.10.0rc3 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.10, <= 0.2.10 or >= 0.2.100, <= 0.2.100 or >= 0.2.102, <= 0.2.102 or >= 0.2.108, <= 0.2.108 or >= 0.2.109, <= 0.2.109 or >= 0.2.11, <= 0.2.11 or >= 0.2.110, <= 0.2.110 or >= 0.2.111, <= 0.2.111 or >= 0.2.113, <= 0.2.113 or >= 0.2.114, <= 0.2.114 or >= 0.2.115, <= 0.2.115 or >= 0.2.117, <= 0.2.117 or >= 0.2.12, <= 0.2.12 or >= 0.2.120, <= 0.2.120 or >= 0.2.123, <= 0.2.123 or >= 0.2.124, <= 0.2.124 or >= 0.2.125, <= 0.2.125 or >= 0.2.126, <= 0.2.126 or >= 0.2.128, <= 0.2.128 or >= 0.2.129, <= 0.2.129 or >= 0.2.13, <= 0.2.13 or >= 0.2.130, <= 0.2.130 or >= 0.2.132, <= 0.2.132 or >= 0.2.134, <= 0.2.134 or >= 0.2.135, <= 0.2.135 or >= 0.2.137, <= 0.2.137 or >= 0.2.14, <= 0.2.14 or >= 0.2.15, <= 0.2.15 or >= 0.2.16, <= 0.2.16 or >= 0.2.17, <= 0.2.17 or >= 0.2.18, <= 0.2.18 or >= 0.2.19, <= 0.2.19 or >= 0.2.2, <= 0.2.2 or >= 0.2.20, <= 0.2.20 or >= 0.2.21, <= 0.2.21 or >= 0.2.23, <= 0.2.23 or >= 0.2.24, <= 0.2.24 or >= 0.2.25, <= 0.2.25 or >= 0.2.26, <= 0.2.26 or >= 0.2.27, <= 0.2.27 or >= 0.2.28, <= 0.2.28 or >= 0.2.29, <= 0.2.29 or >= 0.2.3, <= 0.2.3 or >= 0.2.30, <= 0.2.30 or >= 0.2.32, <= 0.2.32 or >= 0.2.34, <= 0.2.34 or >= 0.2.35, <= 0.2.35 or >= 0.2.36, <= 0.2.36 or >= 0.2.37, <= 0.2.37 or >= 0.2.38, <= 0.2.38 or >= 0.2.39, <= 0.2.39 or >= 0.2.4, <= 0.2.4 or >= 0.2.40, <= 0.2.40 or >= 0.2.42, <= 0.2.42 or >= 0.2.43, <= 0.2.43 or >= 0.2.44, <= 0.2.44 or >= 0.2.45, <= 0.2.45 or >= 0.2.46, <= 0.2.46 or >= 0.2.48, <= 0.2.48 or >= 0.2.5, <= 0.2.5 or >= 0.2.51, <= 0.2.51 or >= 0.2.54, <= 0.2.54 or >= 0.2.56, <= 0.2.56 or >= 0.2.6, <= 0.2.6 or >= 0.2.60, <= 0.2.60 or >= 0.2.61, <= 0.2.61 or >= 0.2.63, <= 0.2.63 or >= 0.2.64, <= 0.2.64 or >= 0.2.66, <= 0.2.66 or >= 0.2.67, <= 0.2.67 or >= 0.2.68, <= 0.2.68 or >= 0.2.69, <= 0.2.69 or >= 0.2.7, <= 0.2.7 or >= 0.2.70, <= 0.2.70 or >= 0.2.71, <= 0.2.71 or >= 0.2.72, <= 0.2.72 or >= 0.2.75, <= 0.2.75 or >= 0.2.76, <= 0.2.76 or >= 0.2.77, <= 0.2.77 or >= 0.2.78, <= 0.2.78 or >= 0.2.8, <= 0.2.8 or >= 0.2.83, <= 0.2.83 or >= 0.2.85, <= 0.2.85 or >= 0.2.86, <= 0.2.86 or >= 0.2.88, <= 0.2.88 or >= 0.2.89, <= 0.2.89 or >= 0.2.9, <= 0.2.9 or >= 0.2.92, <= 0.2.92 or >= 0.2.94, <= 0.2.94 or >= 0.2.95, <= 0.2.95 or >= 0.2.96, <= 0.2.96 or >= 0.2.97, <= 0.2.97 or >= 0.2.98, <= 0.2.98 or >= 0.2.99, <= 0.2.99 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.4, <= 0.3.4 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.11, <= 0.4.11 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.17, <= 0.4.17 or >= 0.4.18, <= 0.4.18 or >= 0.4.19, <= 0.4.19 or >= 0.4.20, <= 0.4.20 or >= 0.4.21, <= 0.4.21 or >= 0.4.22, <= 0.4.22 or >= 0.4.23, <= 0.4.23 or >= 0.4.24, <= 0.4.24 or >= 0.4.25, <= 0.4.25 or >= 0.4.26, <= 0.4.26 or >= 0.4.27, <= 0.4.27 or >= 0.4.28, <= 0.4.28 or >= 0.4.29, <= 0.4.29 or >= 0.4.30, <= 0.4.30 or >= 0.4.31, <= 0.4.31 or >= 0.4.32, <= 0.4.32 or >= 0.4.33, <= 0.4.33 or >= 0.4.34, <= 0.4.34 or >= 0.4.35, <= 0.4.35 or >= 0.4.36, <= 0.4.36 or >= 0.4.37, <= 0.4.37 or >= 0.4.38, <= 0.4.38 or >= 0.4.39, <= 0.4.39 or >= 0.4.40, <= 0.4.40 or >= 0.4.41, <= 0.4.41 or >= 0.4.42, <= 0.4.42 or >= 0.4.43, <= 0.4.43 or >= 0.4.44, <= 0.4.44 or >= 0.4.45, <= 0.4.45 or >= 0.4.46, <= 0.4.46 or >= 0.4.47, <= 0.4.47 or >= 0.4.48, <= 0.4.48 or >= 0.4.7, <= 0.4.7 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.14, <= 0.5.14 or >= 0.5.15, <= 0.5.15 or >= 0.5.16, <= 0.5.16 or >= 0.5.17, <= 0.5.17 or >= 0.5.18, <= 0.5.18 or >= 0.5.19, <= 0.5.19 or >= 0.5.2, <= 0.5.2 or >= 0.5.20, <= 0.5.20 or >= 0.5.21, <= 0.5.21 or >= 0.5.22, <= 0.5.22 or >= 0.5.23, <= 0.5.23 or >= 0.5.24, <= 0.5.24 or >= 0.5.25, <= 0.5.25 or >= 0.5.26, <= 0.5.26 or >= 0.5.27, <= 0.5.27 or >= 0.5.28, <= 0.5.28 or >= 0.5.29, <= 0.5.29 or >= 0.5.3, <= 0.5.3 or >= 0.5.30, <= 0.5.30 or >= 0.5.31, <= 0.5.31 or >= 0.5.32, <= 0.5.32 or >= 0.5.33, <= 0.5.33 or >= 0.5.34, <= 0.5.34 or >= 0.5.35, <= 0.5.35 or >= 0.5.36, <= 0.5.36 or >= 0.5.37, <= 0.5.37 or >= 0.5.38, <= 0.5.38 or >= 0.5.39, <= 0.5.39 or >= 0.5.4, <= 0.5.4 or >= 0.5.40, <= 0.5.40 or >= 0.5.41, <= 0.5.41 or >= 0.5.42, <= 0.5.42 or >= 0.5.5, <= 0.5.5 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.12, <= 0.6.12 or >= 0.6.13, <= 0.6.13 or >= 0.6.14, <= 0.6.14 or >= 0.6.15, <= 0.6.15 or >= 0.6.16, <= 0.6.16 or >= 0.6.17, <= 0.6.17 or >= 0.6.18, <= 0.6.18 or >= 0.6.19, <= 0.6.19 or >= 0.6.2, <= 0.6.2 or >= 0.6.20, <= 0.6.20 or >= 0.6.21, <= 0.6.21 or >= 0.6.22, <= 0.6.22 or >= 0.6.23, <= 0.6.23 or >= 0.6.24, <= 0.6.24 or >= 0.6.25, <= 0.6.25 or >= 0.6.26, <= 0.6.26 or >= 0.6.27, <= 0.6.27 or >= 0.6.28, <= 0.6.28 or >= 0.6.29, <= 0.6.29 or >= 0.6.3, <= 0.6.3 or >= 0.6.30, <= 0.6.30 or >= 0.6.31, <= 0.6.31 or >= 0.6.32, <= 0.6.32 or >= 0.6.33, <= 0.6.33 or >= 0.6.34, <= 0.6.34 or >= 0.6.35, <= 0.6.35 or >= 0.6.36, <= 0.6.36 or >= 0.6.37, <= 0.6.37 or >= 0.6.38, <= 0.6.38 or >= 0.6.39, <= 0.6.39 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.100, <= 0.7.100 or >= 0.7.101, <= 0.7.101 or >= 0.7.102, <= 0.7.102 or >= 0.7.103, <= 0.7.103 or >= 0.7.12, <= 0.7.12 or >= 0.7.13, <= 0.7.13 or >= 0.7.14, <= 0.7.14 or >= 0.7.15, <= 0.7.15 or >= 0.7.16, <= 0.7.16 or >= 0.7.17, <= 0.7.17 or >= 0.7.18, <= 0.7.18 or >= 0.7.19, <= 0.7.19 or >= 0.7.2, <= 0.7.2 or >= 0.7.21, <= 0.7.21 or >= 0.7.22, <= 0.7.22 or >= 0.7.23, <= 0.7.23 or >= 0.7.24, <= 0.7.24 or >= 0.7.25, <= 0.7.25 or >= 0.7.26, <= 0.7.26 or >= 0.7.27, <= 0.7.27 or >= 0.7.28, <= 0.7.28 or >= 0.7.29, <= 0.7.29 or >= 0.7.3, <= 0.7.3 or >= 0.7.30, <= 0.7.30 or >= 0.7.31, <= 0.7.31 or >= 0.7.32, <= 0.7.32 or >= 0.7.33, <= 0.7.33 or >= 0.7.34, <= 0.7.34 or >= 0.7.35, <= 0.7.35 or >= 0.7.36, <= 0.7.36 or >= 0.7.37, <= 0.7.37 or >= 0.7.38, <= 0.7.38 or >= 0.7.39, <= 0.7.39 or >= 0.7.4, <= 0.7.4 or >= 0.7.40, <= 0.7.40 or >= 0.7.41, <= 0.7.41 or >= 0.7.42, <= 0.7.42 or >= 0.7.43, <= 0.7.43 or >= 0.7.44, <= 0.7.44 or >= 0.7.45, <= 0.7.45 or >= 0.7.46, <= 0.7.46 or >= 0.7.47, <= 0.7.47 or >= 0.7.48, <= 0.7.48 or >= 0.7.49, <= 0.7.49 or >= 0.7.5, <= 0.7.5 or >= 0.7.50, <= 0.7.50 or >= 0.7.51, <= 0.7.51 or >= 0.7.52, <= 0.7.52 or >= 0.7.53, <= 0.7.53 or >= 0.7.54, <= 0.7.54 or >= 0.7.55, <= 0.7.55 or >= 0.7.56, <= 0.7.56 or >= 0.7.57, <= 0.7.57 or >= 0.7.58, <= 0.7.58 or >= 0.7.59, <= 0.7.59 or >= 0.7.6, <= 0.7.6 or >= 0.7.60, <= 0.7.60 or >= 0.7.61, <= 0.7.61 or >= 0.7.62, <= 0.7.62 or >= 0.7.63, <= 0.7.63 or >= 0.7.64, <= 0.7.64 or >= 0.7.65, <= 0.7.65 or >= 0.7.66, <= 0.7.66 or >= 0.7.67, <= 0.7.67 or >= 0.7.68, <= 0.7.68 or >= 0.7.69, <= 0.7.69 or >= 0.7.7, <= 0.7.7 or >= 0.7.70, <= 0.7.70 or >= 0.7.71, <= 0.7.71 or >= 0.7.72, <= 0.7.72 or >= 0.7.73, <= 0.7.73 or >= 0.7.74, <= 0.7.74 or >= 0.7.75, <= 0.7.75 or >= 0.7.76, <= 0.7.76 or >= 0.7.77, <= 0.7.77 or >= 0.7.78, <= 0.7.78 or >= 0.7.79, <= 0.7.79 or >= 0.7.8, <= 0.7.8 or >= 0.7.80, <= 0.7.80 or >= 0.7.81, <= 0.7.81 or >= 0.7.82, <= 0.7.82 or >= 0.7.83, <= 0.7.83 or >= 0.7.84, <= 0.7.84 or >= 0.7.85, <= 0.7.85 or >= 0.7.86, <= 0.7.86 or >= 0.7.87, <= 0.7.87 or >= 0.7.88, <= 0.7.88 or >= 0.7.89, <= 0.7.89 or >= 0.7.9, <= 0.7.9 or >= 0.7.90, <= 0.7.90 or >= 0.7.91, <= 0.7.91 or >= 0.7.92, <= 0.7.92 or >= 0.7.93, <= 0.7.93 or >= 0.7.94, <= 0.7.94 or >= 0.7.95, <= 0.7.95 or >= 0.7.96, <= 0.7.96 or >= 0.7.97, <= 0.7.97 or >= 0.7.98, <= 0.7.98 or >= 0.7.99, <= 0.7.99 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.2, <= 0.8.2 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.9.0, <= 0.9.0 or >= 0.9.0.dev1, <= 0.9.0.dev1 or >= 0.9.0.dev2, <= 0.9.0.dev2 or >= 0.9.0.dev3, <= 0.9.0.dev3 or >= 0.9.0.dev4, <= 0.9.0.dev4 or >= 0.9.0.dev5, <= 0.9.0.dev5 or >= 0.9.0.dev6, <= 0.9.0.dev6 or >= 0.9.0rc1, <= 0.9.0rc1 or >= 0.9.1, <= 0.9.1 or < 0.10.0 or >= 0.0.1, <= 0.0.1 or >= 0.0.10, <= 0.0.10 or >= 0.0.11, <= 0.0.11 or >= 0.0.12, <= 0.0.12 or >= 0.0.13, <= 0.0.13 or >= 0.0.14, <= 0.0.14 or >= 0.0.15, <= 0.0.15 or >= 0.0.16, <= 0.0.16 or >= 0.0.17, <= 0.0.17 or >= 0.0.18, <= 0.0.18 or >= 0.0.19, <= 0.0.19 or >= 0.0.2, <= 0.0.2 or >= 0.0.20, <= 0.0.20 or >= 0.0.21, <= 0.0.21 or >= 0.0.22, <= 0.0.22 or >= 0.0.23, <= 0.0.23 or >= 0.0.24, <= 0.0.24 or >= 0.0.25, <= 0.0.25 or >= 0.0.26, <= 0.0.26 or >= 0.0.27, <= 0.0.27 or >= 0.0.28, <= 0.0.28 or >= 0.0.28rc1, <= 0.0.28rc1 or >= 0.0.3, <= 0.0.3 or >= 0.0.30, <= 0.0.30 or >= 0.0.31, <= 0.0.31 or >= 0.0.32, <= 0.0.32 or >= 0.0.33, <= 0.0.33 or >= 0.0.34, <= 0.0.34 or >= 0.0.36, <= 0.0.36 or >= 0.0.37, <= 0.0.37 or >= 0.0.38, <= 0.0.38 or >= 0.0.39, <= 0.0.39 or >= 0.0.4, <= 0.0.4 or >= 0.0.40, <= 0.0.40 or >= 0.0.41, <= 0.0.41 or >= 0.0.42, <= 0.0.42 or >= 0.0.43, <= 0.0.43 or >= 0.0.44, <= 0.0.44 or >= 0.0.45, <= 0.0.45 or >= 0.0.46, <= 0.0.46 or >= 0.0.47, <= 0.0.47 or >= 0.0.48, <= 0.0.48 or >= 0.0.5, <= 0.0.5 or >= 0.0.6, <= 0.0.6 or >= 0.0.7, <= 0.0.7 or >= 0.0.8, <= 0.0.8 or >= 0.0.9, <= 0.0.9 or >= 0.1.0, <= 0.1.0 or >= 0.1.12, <= 0.1.12 or >= 0.1.13, <= 0.1.13 or >= 0.1.14, <= 0.1.14 or >= 0.1.15, <= 0.1.15 or >= 0.1.16, <= 0.1.16 or >= 0.1.17, <= 0.1.17 or >= 0.1.18, <= 0.1.18 or >= 0.1.2, <= 0.1.2 or >= 0.1.20, <= 0.1.20 or >= 0.1.21, <= 0.1.21 or >= 0.1.22, <= 0.1.22 or >= 0.1.23, <= 0.1.23 or >= 0.1.3, <= 0.1.3 or >= 0.1.4, <= 0.1.4 or >= 0.1.5, <= 0.1.5 or >= 0.1.6, <= 0.1.6 or >= 0.1.7, <= 0.1.7 or >= 0.1.8, <= 0.1.8 or >= 0.1.9, <= 0.1.9 or >= 0.10.0rc1, <= 0.10.0rc1 or >= 0.10.0rc2, <= 0.10.0rc2 or >= 0.10.0rc3, <= 0.10.0rc3 or >= 0.2.0, <= 0.2.0 or >= 0.2.1, <= 0.2.1 or >= 0.2.10, <= 0.2.10 or >= 0.2.100, <= 0.2.100 or >= 0.2.102, <= 0.2.102 or >= 0.2.108, <= 0.2.108 or >= 0.2.109, <= 0.2.109 or >= 0.2.11, <= 0.2.11 or >= 0.2.110, <= 0.2.110 or >= 0.2.111, <= 0.2.111 or >= 0.2.113, <= 0.2.113 or >= 0.2.114, <= 0.2.114 or >= 0.2.115, <= 0.2.115 or >= 0.2.117, <= 0.2.117 or >= 0.2.12, <= 0.2.12 or >= 0.2.120, <= 0.2.120 or >= 0.2.123, <= 0.2.123 or >= 0.2.124, <= 0.2.124 or >= 0.2.125, <= 0.2.125 or >= 0.2.126, <= 0.2.126 or >= 0.2.128, <= 0.2.128 or >= 0.2.129, <= 0.2.129 or >= 0.2.13, <= 0.2.13 or >= 0.2.130, <= 0.2.130 or >= 0.2.132, <= 0.2.132 or >= 0.2.134, <= 0.2.134 or >= 0.2.135, <= 0.2.135 or >= 0.2.137, <= 0.2.137 or >= 0.2.14, <= 0.2.14 or >= 0.2.15, <= 0.2.15 or >= 0.2.16, <= 0.2.16 or >= 0.2.17, <= 0.2.17 or >= 0.2.18, <= 0.2.18 or >= 0.2.19, <= 0.2.19 or >= 0.2.2, <= 0.2.2 or >= 0.2.20, <= 0.2.20 or >= 0.2.21, <= 0.2.21 or >= 0.2.23, <= 0.2.23 or >= 0.2.24, <= 0.2.24 or >= 0.2.25, <= 0.2.25 or >= 0.2.26, <= 0.2.26 or >= 0.2.27, <= 0.2.27 or >= 0.2.28, <= 0.2.28 or >= 0.2.29, <= 0.2.29 or >= 0.2.3, <= 0.2.3 or >= 0.2.30, <= 0.2.30 or >= 0.2.32, <= 0.2.32 or >= 0.2.34, <= 0.2.34 or >= 0.2.35, <= 0.2.35 or >= 0.2.36, <= 0.2.36 or >= 0.2.37, <= 0.2.37 or >= 0.2.38, <= 0.2.38 or >= 0.2.39, <= 0.2.39 or >= 0.2.4, <= 0.2.4 or >= 0.2.40, <= 0.2.40 or >= 0.2.42, <= 0.2.42 or >= 0.2.43, <= 0.2.43 or >= 0.2.44, <= 0.2.44 or >= 0.2.45, <= 0.2.45 or >= 0.2.46, <= 0.2.46 or >= 0.2.48, <= 0.2.48 or >= 0.2.5, <= 0.2.5 or >= 0.2.51, <= 0.2.51 or >= 0.2.54, <= 0.2.54 or >= 0.2.56, <= 0.2.56 or >= 0.2.6, <= 0.2.6 or >= 0.2.60, <= 0.2.60 or >= 0.2.61, <= 0.2.61 or >= 0.2.63, <= 0.2.63 or >= 0.2.64, <= 0.2.64 or >= 0.2.66, <= 0.2.66 or >= 0.2.67, <= 0.2.67 or >= 0.2.68, <= 0.2.68 or >= 0.2.69, <= 0.2.69 or >= 0.2.7, <= 0.2.7 or >= 0.2.70, <= 0.2.70 or >= 0.2.71, <= 0.2.71 or >= 0.2.72, <= 0.2.72 or >= 0.2.75, <= 0.2.75 or >= 0.2.76, <= 0.2.76 or >= 0.2.77, <= 0.2.77 or >= 0.2.78, <= 0.2.78 or >= 0.2.8, <= 0.2.8 or >= 0.2.83, <= 0.2.83 or >= 0.2.85, <= 0.2.85 or >= 0.2.86, <= 0.2.86 or >= 0.2.88, <= 0.2.88 or >= 0.2.89, <= 0.2.89 or >= 0.2.9, <= 0.2.9 or >= 0.2.92, <= 0.2.92 or >= 0.2.94, <= 0.2.94 or >= 0.2.95, <= 0.2.95 or >= 0.2.96, <= 0.2.96 or >= 0.2.97, <= 0.2.97 or >= 0.2.98, <= 0.2.98 or >= 0.2.99, <= 0.2.99 or >= 0.3.0, <= 0.3.0 or >= 0.3.1, <= 0.3.1 or >= 0.3.4, <= 0.3.4 or >= 0.4.0, <= 0.4.0 or >= 0.4.1, <= 0.4.1 or >= 0.4.11, <= 0.4.11 or >= 0.4.14, <= 0.4.14 or >= 0.4.15, <= 0.4.15 or >= 0.4.16, <= 0.4.16 or >= 0.4.17, <= 0.4.17 or >= 0.4.18, <= 0.4.18 or >= 0.4.19, <= 0.4.19 or >= 0.4.20, <= 0.4.20 or >= 0.4.21, <= 0.4.21 or >= 0.4.22, <= 0.4.22 or >= 0.4.23, <= 0.4.23 or >= 0.4.24, <= 0.4.24 or >= 0.4.25, <= 0.4.25 or >= 0.4.26, <= 0.4.26 or >= 0.4.27, <= 0.4.27 or >= 0.4.28, <= 0.4.28 or >= 0.4.29, <= 0.4.29 or >= 0.4.30, <= 0.4.30 or >= 0.4.31, <= 0.4.31 or >= 0.4.32, <= 0.4.32 or >= 0.4.33, <= 0.4.33 or >= 0.4.34, <= 0.4.34 or >= 0.4.35, <= 0.4.35 or >= 0.4.36, <= 0.4.36 or >= 0.4.37, <= 0.4.37 or >= 0.4.38, <= 0.4.38 or >= 0.4.39, <= 0.4.39 or >= 0.4.40, <= 0.4.40 or >= 0.4.41, <= 0.4.41 or >= 0.4.42, <= 0.4.42 or >= 0.4.43, <= 0.4.43 or >= 0.4.44, <= 0.4.44 or >= 0.4.45, <= 0.4.45 or >= 0.4.46, <= 0.4.46 or >= 0.4.47, <= 0.4.47 or >= 0.4.48, <= 0.4.48 or >= 0.4.7, <= 0.4.7 or >= 0.4.9, <= 0.4.9 or >= 0.5.0, <= 0.5.0 or >= 0.5.1, <= 0.5.1 or >= 0.5.10, <= 0.5.10 or >= 0.5.11, <= 0.5.11 or >= 0.5.12, <= 0.5.12 or >= 0.5.13, <= 0.5.13 or >= 0.5.14, <= 0.5.14 or >= 0.5.15, <= 0.5.15 or >= 0.5.16, <= 0.5.16 or >= 0.5.17, <= 0.5.17 or >= 0.5.18, <= 0.5.18 or >= 0.5.19, <= 0.5.19 or >= 0.5.2, <= 0.5.2 or >= 0.5.20, <= 0.5.20 or >= 0.5.21, <= 0.5.21 or >= 0.5.22, <= 0.5.22 or >= 0.5.23, <= 0.5.23 or >= 0.5.24, <= 0.5.24 or >= 0.5.25, <= 0.5.25 or >= 0.5.26, <= 0.5.26 or >= 0.5.27, <= 0.5.27 or >= 0.5.28, <= 0.5.28 or >= 0.5.29, <= 0.5.29 or >= 0.5.3, <= 0.5.3 or >= 0.5.30, <= 0.5.30 or >= 0.5.31, <= 0.5.31 or >= 0.5.32, <= 0.5.32 or >= 0.5.33, <= 0.5.33 or >= 0.5.34, <= 0.5.34 or >= 0.5.35, <= 0.5.35 or >= 0.5.36, <= 0.5.36 or >= 0.5.37, <= 0.5.37 or >= 0.5.38, <= 0.5.38 or >= 0.5.39, <= 0.5.39 or >= 0.5.4, <= 0.5.4 or >= 0.5.40, <= 0.5.40 or >= 0.5.41, <= 0.5.41 or >= 0.5.42, <= 0.5.42 or >= 0.5.5, <= 0.5.5 or >= 0.5.6, <= 0.5.6 or >= 0.5.7, <= 0.5.7 or >= 0.5.8, <= 0.5.8 or >= 0.5.9, <= 0.5.9 or >= 0.6.0, <= 0.6.0 or >= 0.6.1, <= 0.6.1 or >= 0.6.10, <= 0.6.10 or >= 0.6.11, <= 0.6.11 or >= 0.6.12, <= 0.6.12 or >= 0.6.13, <= 0.6.13 or >= 0.6.14, <= 0.6.14 or >= 0.6.15, <= 0.6.15 or >= 0.6.16, <= 0.6.16 or >= 0.6.17, <= 0.6.17 or >= 0.6.18, <= 0.6.18 or >= 0.6.19, <= 0.6.19 or >= 0.6.2, <= 0.6.2 or >= 0.6.20, <= 0.6.20 or >= 0.6.21, <= 0.6.21 or >= 0.6.22, <= 0.6.22 or >= 0.6.23, <= 0.6.23 or >= 0.6.24, <= 0.6.24 or >= 0.6.25, <= 0.6.25 or >= 0.6.26, <= 0.6.26 or >= 0.6.27, <= 0.6.27 or >= 0.6.28, <= 0.6.28 or >= 0.6.29, <= 0.6.29 or >= 0.6.3, <= 0.6.3 or >= 0.6.30, <= 0.6.30 or >= 0.6.31, <= 0.6.31 or >= 0.6.32, <= 0.6.32 or >= 0.6.33, <= 0.6.33 or >= 0.6.34, <= 0.6.34 or >= 0.6.35, <= 0.6.35 or >= 0.6.36, <= 0.6.36 or >= 0.6.37, <= 0.6.37 or >= 0.6.38, <= 0.6.38 or >= 0.6.39, <= 0.6.39 or >= 0.6.4, <= 0.6.4 or >= 0.6.5, <= 0.6.5 or >= 0.6.6, <= 0.6.6 or >= 0.6.7, <= 0.6.7 or >= 0.6.8, <= 0.6.8 or >= 0.6.9, <= 0.6.9 or >= 0.7.0, <= 0.7.0 or >= 0.7.1, <= 0.7.1 or >= 0.7.100, <= 0.7.100 or >= 0.7.101, <= 0.7.101 or >= 0.7.102, <= 0.7.102 or >= 0.7.103, <= 0.7.103 or >= 0.7.12, <= 0.7.12 or >= 0.7.13, <= 0.7.13 or >= 0.7.14, <= 0.7.14 or >= 0.7.15, <= 0.7.15 or >= 0.7.16, <= 0.7.16 or >= 0.7.17, <= 0.7.17 or >= 0.7.18, <= 0.7.18 or >= 0.7.19, <= 0.7.19 or >= 0.7.2, <= 0.7.2 or >= 0.7.21, <= 0.7.21 or >= 0.7.22, <= 0.7.22 or >= 0.7.23, <= 0.7.23 or >= 0.7.24, <= 0.7.24 or >= 0.7.25, <= 0.7.25 or >= 0.7.26, <= 0.7.26 or >= 0.7.27, <= 0.7.27 or >= 0.7.28, <= 0.7.28 or >= 0.7.29, <= 0.7.29 or >= 0.7.3, <= 0.7.3 or >= 0.7.30, <= 0.7.30 or >= 0.7.31, <= 0.7.31 or >= 0.7.32, <= 0.7.32 or >= 0.7.33, <= 0.7.33 or >= 0.7.34, <= 0.7.34 or >= 0.7.35, <= 0.7.35 or >= 0.7.36, <= 0.7.36 or >= 0.7.37, <= 0.7.37 or >= 0.7.38, <= 0.7.38 or >= 0.7.39, <= 0.7.39 or >= 0.7.4, <= 0.7.4 or >= 0.7.40, <= 0.7.40 or >= 0.7.41, <= 0.7.41 or >= 0.7.42, <= 0.7.42 or >= 0.7.43, <= 0.7.43 or >= 0.7.44, <= 0.7.44 or >= 0.7.45, <= 0.7.45 or >= 0.7.46, <= 0.7.46 or >= 0.7.47, <= 0.7.47 or >= 0.7.48, <= 0.7.48 or >= 0.7.49, <= 0.7.49 or >= 0.7.5, <= 0.7.5 or >= 0.7.50, <= 0.7.50 or >= 0.7.51, <= 0.7.51 or >= 0.7.52, <= 0.7.52 or >= 0.7.53, <= 0.7.53 or >= 0.7.54, <= 0.7.54 or >= 0.7.55, <= 0.7.55 or >= 0.7.56, <= 0.7.56 or >= 0.7.57, <= 0.7.57 or >= 0.7.58, <= 0.7.58 or >= 0.7.59, <= 0.7.59 or >= 0.7.6, <= 0.7.6 or >= 0.7.60, <= 0.7.60 or >= 0.7.61, <= 0.7.61 or >= 0.7.62, <= 0.7.62 or >= 0.7.63, <= 0.7.63 or >= 0.7.64, <= 0.7.64 or >= 0.7.65, <= 0.7.65 or >= 0.7.66, <= 0.7.66 or >= 0.7.67, <= 0.7.67 or >= 0.7.68, <= 0.7.68 or >= 0.7.69, <= 0.7.69 or >= 0.7.7, <= 0.7.7 or >= 0.7.70, <= 0.7.70 or >= 0.7.71, <= 0.7.71 or >= 0.7.72, <= 0.7.72 or >= 0.7.73, <= 0.7.73 or >= 0.7.74, <= 0.7.74 or >= 0.7.75, <= 0.7.75 or >= 0.7.76, <= 0.7.76 or >= 0.7.77, <= 0.7.77 or >= 0.7.78, <= 0.7.78 or >= 0.7.79, <= 0.7.79 or >= 0.7.8, <= 0.7.8 or >= 0.7.80, <= 0.7.80 or >= 0.7.81, <= 0.7.81 or >= 0.7.82, <= 0.7.82 or >= 0.7.83, <= 0.7.83 or >= 0.7.84, <= 0.7.84 or >= 0.7.85, <= 0.7.85 or >= 0.7.86, <= 0.7.86 or >= 0.7.87, <= 0.7.87 or >= 0.7.88, <= 0.7.88 or >= 0.7.89, <= 0.7.89 or >= 0.7.9, <= 0.7.9 or >= 0.7.90, <= 0.7.90 or >= 0.7.91, <= 0.7.91 or >= 0.7.92, <= 0.7.92 or >= 0.7.93, <= 0.7.93 or >= 0.7.94, <= 0.7.94 or >= 0.7.95, <= 0.7.95 or >= 0.7.96, <= 0.7.96 or >= 0.7.97, <= 0.7.97 or >= 0.7.98, <= 0.7.98 or >= 0.7.99, <= 0.7.99 or >= 0.8.0, <= 0.8.0 or >= 0.8.1, <= 0.8.1 or >= 0.8.2, <= 0.8.2 or >= 0.8.3, <= 0.8.3 or >= 0.8.4, <= 0.8.4 or >= 0.8.5, <= 0.8.5 or >= 0.8.6, <= 0.8.6 or >= 0.8.7, <= 0.8.7 or >= 0.9.0, <= 0.9.0 or >= 0.9.0.dev1, <= 0.9.0.dev1 or >= 0.9.0.dev2, <= 0.9.0.dev2 or >= 0.9.0.dev3, <= 0.9.0.dev3 or >= 0.9.0.dev4, <= 0.9.0.dev4 or >= 0.9.0.dev5, <= 0.9.0.dev5 or >= 0.9.0.dev6, <= 0.9.0.dev6 or >= 0.9.0rc1, <= 0.9.0rc1 or >= 0.9.1, <= 0.9.1

Patched version

Not yet available

An early warning has been issued for a vulnerability in langgraph-api that allows unauthorized access to user threads through relative webhook targets.

What happened

In affected versions of langgraph-api, a run or cron could be created with a relative webhook target. When the server delivers such a webhook, it routes the request back into the same application through an in-process loopback transport that bypasses authentication. This could potentially allow unauthorized access to another user's thread.

The vulnerability appears to affect a wide range of versions, from 0.0.1 to 0.9.1, with specific exclusions. Users of langgraph-api should check their version against the provided list to determine if they are affected.

What to do about it

• Check your current version of langgraph-api against the affected version range provided.
• If you are using an affected version, upgrade to the latest version of langgraph-api that includes the fix for the loopback delivery denial policy.
• Monitor the primary sources for updates on the vulnerability and any official fixes that may be released.

How 0Day would have caught this

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Sources

• [GHSA-2c9q-c2q9-qgqv] langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

Join the 0Day waitlist →

← Back to all threats