{
  "ghsa_id": "GHSA-wwqv-p2pp-99h5",
  "cve_id": "CVE-2025-64439",
  "cwe_id": "CWE-502",
  "package": "langgraph-checkpoint",
  "ecosystem": "pip",
  "severity": "high",
  "cvss_score": 7.4,
  "affected_versions": "< 3.0.0",
  "fixed_version": "3.0.0",
  "source_url": "https://github.com/langchain-ai/langgraph/security/advisories/GHSA-wwqv-p2pp-99h5",
  "simulation_inputs": {
    "vulnerable_version": "2.0.6",
    "patched_version": "3.0.0",
    "install_command": "pip install langgraph-checkpoint",
    "attack_vector": "constructor_deserialization"
  },
  "poc_sources": [
    "https://github.com/langchain-ai/langgraph/security/advisories/GHSA-wwqv-p2pp-99h5"
  ]
}