[{"data":1,"prerenderedAt":386},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langgraph-6c1c645e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":252,"related":310},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-12T14:25:03.090Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-12T14:23:04.538Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":86,"occurrenceCount":87,"directRepositoryCount":88,"versionCount":86,"licenseExpressions":89,"advisoryIds":91,"advisoryCount":88,"verifiedAttestation":45,"repositories":94,"versions":143},"package:pypi:langgraph","langgraph-6c1c645e","pypi:langgraph","pypi","langgraph","LangGraph","agents",true,null,7,9,2,[90],"MIT",[92,93],"GHSA-g48c-2wqr-h844","GHSA-w39p-vh2g-g8g5",[95,102,108,115,122,129,136],{"id":96,"slug":97,"name":98,"pathWithNamespace":99,"versions":100,"evidenceCount":88},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[101],"1.2.10",{"id":103,"slug":104,"name":98,"pathWithNamespace":105,"versions":106,"evidenceCount":88},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[107],"1.2.7",{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":32},"opencode:4609","opencode-4609","LLM_Workshop","bbsr_ida_public\u002Fllm_workshop",[114],"0.3.21",{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":120,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[121],"1.0.6",{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":127,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[128],"0.1.1",{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":134,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[135],"1.2.5",{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":141,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[142],"1.2.9",[144,165,177,196,210,224,238],{"version":128,"repositoryCount":32,"occurrenceCount":32,"ageDays":145,"advisoryIds":146,"metadata":147},781,[92,93],{"state":148,"checkedAt":149,"publishedAt":150,"deprecated":45,"deprecatedReason":85,"licenses":151,"advisoryIds":152,"links":155,"relatedProjects":159,"attestations":163,"verifiedAttestation":45,"projectStatus":164},"resolved","2026-08-12T03:23:44.487Z","2024-06-22T00:51:10Z",[90],[92,153,154],"PYSEC-2026-2194","PYSEC-2026-83",[156],{"label":157,"url":158},"SOURCE_REPO","https:\u002F\u002Fwww.github.com\u002Flangchain-ai\u002Flanggraph",[160],{"id":161,"relationType":157,"relationProvenance":162},"github.com\u002Flangchain-ai\u002Flanggraph","UNVERIFIED_METADATA",[],"active",{"version":114,"repositoryCount":32,"occurrenceCount":32,"ageDays":166,"advisoryIds":167,"metadata":168},502,[92],{"state":148,"checkedAt":149,"publishedAt":169,"deprecated":45,"deprecatedReason":85,"licenses":170,"advisoryIds":171,"links":172,"relatedProjects":174,"attestations":176,"verifiedAttestation":45,"projectStatus":164},"2025-03-27T15:49:43Z",[90],[92,154],[173],{"label":157,"url":158},[175],{"id":161,"relationType":157,"relationProvenance":162},[],{"version":121,"repositoryCount":32,"occurrenceCount":32,"ageDays":178,"advisoryIds":179,"metadata":180},211,[92],{"state":148,"checkedAt":149,"publishedAt":181,"deprecated":45,"deprecatedReason":85,"licenses":182,"advisoryIds":183,"links":184,"relatedProjects":193,"attestations":195,"verifiedAttestation":45,"projectStatus":164},"2026-01-12T20:33:29Z",[90],[92,154],[185,188,191],{"label":186,"url":187},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002Foss\u002Fpython\u002Flanggraph\u002Foverview",{"label":189,"url":190},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flanggraph\u002F",{"label":157,"url":192},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph",[194],{"id":161,"relationType":157,"relationProvenance":162},[],{"version":135,"repositoryCount":32,"occurrenceCount":32,"ageDays":197,"advisoryIds":198,"metadata":199},60,[],{"state":148,"checkedAt":149,"publishedAt":200,"deprecated":45,"deprecatedReason":85,"licenses":201,"advisoryIds":202,"links":203,"relatedProjects":207,"attestations":209,"verifiedAttestation":45,"projectStatus":164},"2026-06-12T20:30:57Z",[90],[],[204,205,206],{"label":186,"url":187},{"label":189,"url":190},{"label":157,"url":192},[208],{"id":161,"relationType":157,"relationProvenance":162},[],{"version":107,"repositoryCount":32,"occurrenceCount":88,"ageDays":211,"advisoryIds":212,"metadata":213},43,[],{"state":148,"checkedAt":149,"publishedAt":214,"deprecated":45,"deprecatedReason":85,"licenses":215,"advisoryIds":216,"links":217,"relatedProjects":221,"attestations":223,"verifiedAttestation":45,"projectStatus":164},"2026-06-30T01:24:11Z",[90],[],[218,219,220],{"label":157,"url":192},{"label":186,"url":187},{"label":189,"url":190},[222],{"id":161,"relationType":157,"relationProvenance":162},[],{"version":142,"repositoryCount":32,"occurrenceCount":32,"ageDays":225,"advisoryIds":226,"metadata":227},33,[],{"state":148,"checkedAt":149,"publishedAt":228,"deprecated":45,"deprecatedReason":85,"licenses":229,"advisoryIds":230,"links":231,"relatedProjects":235,"attestations":237,"verifiedAttestation":45,"projectStatus":164},"2026-07-10T01:30:13Z",[90],[],[232,233,234],{"label":186,"url":187},{"label":189,"url":190},{"label":157,"url":192},[236],{"id":161,"relationType":157,"relationProvenance":162},[],{"version":101,"repositoryCount":32,"occurrenceCount":88,"ageDays":239,"advisoryIds":240,"metadata":241},14,[],{"state":148,"checkedAt":149,"publishedAt":242,"deprecated":45,"deprecatedReason":85,"licenses":243,"advisoryIds":244,"links":245,"relatedProjects":249,"attestations":251,"verifiedAttestation":45,"projectStatus":164},"2026-07-28T18:33:50Z",[90],[],[246,247,248],{"label":186,"url":187},{"label":189,"url":190},{"label":157,"url":192},[250],{"id":161,"relationType":157,"relationProvenance":162},[],{"occurrences":253,"occurrenceCount":87},[254,262,269,276,280,286,290,296,303],{"id":255,"repositoryId":123,"repositorySlug":124,"repositoryName":125,"repositoryPathWithNamespace":126,"ecosystem":80,"name":81,"identity":79,"version":128,"versionKey":256,"direct":84,"development":45,"sourceKind":257,"filePath":258,"blobSha":259,"sourceUrl":260,"commitSha":261},"component:8d17b4d6f59bdf33d974566d","pypi:langgraph@0.1.1","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":263,"repositoryId":116,"repositorySlug":117,"repositoryName":118,"repositoryPathWithNamespace":119,"ecosystem":80,"name":81,"identity":79,"version":121,"versionKey":264,"direct":85,"development":85,"sourceKind":265,"filePath":54,"blobSha":266,"sourceUrl":267,"commitSha":268},"component:d7ed0b97b0e6b5d9e993a8c1","pypi:langgraph@1.0.6","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":270,"repositoryId":96,"repositorySlug":97,"repositoryName":98,"repositoryPathWithNamespace":99,"ecosystem":80,"name":81,"identity":79,"version":101,"versionKey":271,"direct":45,"development":45,"sourceKind":257,"filePath":272,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:7c548e4afec8a9e72d3ba57c","pypi:langgraph@1.2.10","requirements-dev.txt","55d24b0ef7928f118b1abca940e9921a2650f62b","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements-dev.txt","80a91b641aa350678c5e35c31e90ffbb9e696d3c",{"id":277,"repositoryId":96,"repositorySlug":97,"repositoryName":98,"repositoryPathWithNamespace":99,"ecosystem":80,"name":81,"identity":79,"version":101,"versionKey":271,"direct":45,"development":45,"sourceKind":257,"filePath":258,"blobSha":278,"sourceUrl":279,"commitSha":275},"component:7012d5d7d71deb2d684977ed","2dfd8d16ab95eb8d2065f80c3730c69a9dca6637","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements.txt",{"id":281,"repositoryId":103,"repositorySlug":104,"repositoryName":98,"repositoryPathWithNamespace":105,"ecosystem":80,"name":81,"identity":79,"version":107,"versionKey":282,"direct":45,"development":45,"sourceKind":257,"filePath":272,"blobSha":283,"sourceUrl":284,"commitSha":285},"component:6e340bf47e575eee1f4c117d","pypi:langgraph@1.2.7","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":287,"repositoryId":103,"repositorySlug":104,"repositoryName":98,"repositoryPathWithNamespace":105,"ecosystem":80,"name":81,"identity":79,"version":107,"versionKey":282,"direct":45,"development":45,"sourceKind":257,"filePath":258,"blobSha":288,"sourceUrl":289,"commitSha":285},"component:eb66787e0c373ade56d6d75e","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":291,"repositoryId":137,"repositorySlug":138,"repositoryName":139,"repositoryPathWithNamespace":140,"ecosystem":80,"name":81,"identity":79,"version":142,"versionKey":292,"direct":85,"development":85,"sourceKind":265,"filePath":54,"blobSha":293,"sourceUrl":294,"commitSha":295},"component:09e89150f5ec343d00884b92","pypi:langgraph@1.2.9","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":297,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":80,"name":81,"identity":79,"version":114,"versionKey":298,"direct":84,"development":45,"sourceKind":257,"filePath":299,"blobSha":300,"sourceUrl":301,"commitSha":302},"component:69d4c9f26a160b47e1488068","pypi:langgraph@0.3.21","docker\u002Frequirements.txt","0d707ff70a4c5b3584990d5380c8bf62c64284b5","https:\u002F\u002Fgitlab.opencode.de\u002Fbbsr_ida_public\u002Fllm_workshop\u002F-\u002Fblob\u002Ffddd886ab2fd3824e269d40cefde90cbed709201\u002Fdocker\u002Frequirements.txt","fddd886ab2fd3824e269d40cefde90cbed709201",{"id":304,"repositoryId":130,"repositorySlug":131,"repositoryName":132,"repositoryPathWithNamespace":133,"ecosystem":80,"name":81,"identity":79,"version":135,"versionKey":305,"direct":85,"development":85,"sourceKind":265,"filePath":306,"blobSha":307,"sourceUrl":308,"commitSha":309},"component:3656fe8f5facf8af5d86eca8","pypi:langgraph@1.2.5","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"repositories":311,"vulnerabilities":326},[312,314,316,318,320,322,324],{"id":96,"slug":97,"name":98,"pathWithNamespace":99,"versions":313,"evidenceCount":88},[101],{"id":103,"slug":104,"name":98,"pathWithNamespace":105,"versions":315,"evidenceCount":88},[107],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":317,"evidenceCount":32},[114],{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":319,"evidenceCount":32},[121],{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":321,"evidenceCount":32},[128],{"id":130,"slug":131,"name":132,"pathWithNamespace":133,"versions":323,"evidenceCount":32},[135],{"id":137,"slug":138,"name":139,"pathWithNamespace":140,"versions":325,"evidenceCount":32},[142],[327,354],{"id":92,"slug":328,"dossier":45,"summary":329,"aliases":330,"sourceIds":332,"published":333,"modified":334,"checkedAt":7,"severity":335,"references":341,"versionKeys":352,"packageCount":32,"repositoryCount":353},"ghsa-g48c-2wqr-h844-48f35247","LangGraph checkpoint loading has unsafe msgpack deserialization",[331,154],"CVE-2026-28277",[92,154],"2026-03-05T20:16:15.677Z","2026-06-06T01:00:08.116125988Z",[336,339],{"type":337,"score":338},"CVSS_V3","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":337,"score":340},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[342,345,347,349],{"type":343,"url":344},"ADVISORY","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-g48c-2wqr-h844",{"type":343,"url":346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28277",{"type":348,"url":192},"PACKAGE",{"type":350,"url":351},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-83.yaml",[256,298,264],3,{"id":93,"slug":355,"dossier":45,"summary":356,"aliases":357,"sourceIds":360,"published":361,"modified":362,"checkedAt":7,"severity":363,"references":368,"versionKeys":384,"packageCount":88,"repositoryCount":88},"ghsa-w39p-vh2g-g8g5-47880dfe","LangGraph SDK has unsafe URL path construction",[358,153,359],"CVE-2026-48776","PYSEC-2026-2575",[93,153,359],"2026-06-17T10:55:15.113Z","2026-07-21T15:15:50.659527533Z",[364,366],{"type":337,"score":365},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":337,"score":367},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[369,371,373,375,376,378,380,382],{"type":350,"url":370},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Fsecurity\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":343,"url":372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48776",{"type":343,"url":374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w39p-vh2g-g8g5",{"type":348,"url":192},{"type":350,"url":377},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flanggraph\u002Freleases\u002Ftag\u002Fsdk%3D%3D0.3.15",{"type":350,"url":379},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph-sdk\u002FPYSEC-2026-2575.yaml",{"type":350,"url":381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flanggraph\u002FPYSEC-2026-2194.yaml",{"type":348,"url":383},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flanggraph-sdk",[385,256],"pypi:langgraph-sdk@0.3.3",1786545166697]