python · langgraph-sdkHeads-up
langgraph-sdk: path-segment encoding added to prevent path traversal
langgraph-sdk now applies path-segment encoding to identifier values before interpolating them into request URL templates, preventing path traversal via special
What changed
langgraph-sdk now applies path-segment encoding to identifier values before interpolating them into request URL templates, preventing path traversal via special characters.
Who it affects
Users who pass untrusted identifier values (e.g., from end-user input) into langgraph-sdk methods without validating them as UUIDs.
What to do today
Upgrade langgraph-sdk to the latest patched version and validate identifier values (e.g., as UUIDs) before passing them to SDK methods.
The trail
Collected→
Audited→
Written→
Published