langgraph · Issues· 794 open

langgraph-api:3.14 image contains vulnerable benchmark-only npm dependencies

EncryptedSerializer silently accepts unauthenticated plaintext rows, voiding its at-rest integrity guarantee

Vulnerable Go dependencies in langchain/langgraph-api:3.14 core-api-grpc

Docs safety guidance: auditable final-state receipts for agent completion claims?

SQLite mixed-batch retries retain stale special-channel writes

MCP tools/list: annotations hardcoded identically for every tool, and incorrect for read-only/destructive tools

add_node: node protocols make the `state` parameter name load-bearing for type checkers

error_handler runs but the original exception is still raised (parallel nodes, custom/messages streaming, subgraphs=True)

Crash before first durable checkpoint can silently drop an accepted run with no durable failure record

Feature request: Configurable PostgreSQL schema for langgraph-checkpoint-postgres (parity with LangGraphJS)

update_state can permanently erase a thread's messages

建议：支持Build resilient agents.，适配无人零售/IoT场景

SqliteSaver.put raises TypeError on checkpoints whose metadata carries the legacy `writes` key (fixed for Postgres in #6236)

Real stateful workflow use case: autonomous bounty system open for LangGraph agents

stream_mode="values" skips a step when a node returns None or {}, while "updates" emits it