Vulnerable functions
AssistantsClient.getlibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
AssistantsClient.get_graphlibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
AssistantsClient.get_schemaslibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
AssistantsClient.get_subgraphslibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` and `namespace` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
AssistantsClient.updatelibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
AssistantsClient.deletelibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
AssistantsClient.get_versionslibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
AssistantsClient.set_latestlibs/sdk-py/langgraph_sdk/_async/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
CronClient.create_for_threadlibs/sdk-py/langgraph_sdk/_async/cron.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to create resources under unintended paths.
CronClient.deletelibs/sdk-py/langgraph_sdk/_async/cron.py
The function constructs a URL path for an API request by directly embedding the `cron_id` without sanitization. A malicious `cron_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
CronClient.updatelibs/sdk-py/langgraph_sdk/_async/cron.py
The function constructs a URL path for an API request by directly embedding the `cron_id` without sanitization. A malicious `cron_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
RunsClient.getlibs/sdk-py/langgraph_sdk/_async/runs.py
The function constructs a URL path for an API request by directly embedding `thread_id` and `run_id` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
RunsClient.deletelibs/sdk-py/langgraph_sdk/_async/runs.py
The function constructs a URL path for an API request by directly embedding `thread_id` and `run_id` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
ThreadsClient.getlibs/sdk-py/langgraph_sdk/_async/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
ThreadsClient.updatelibs/sdk-py/langgraph_sdk/_async/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
ThreadsClient.deletelibs/sdk-py/langgraph_sdk/_async/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
SyncAssistantsClient.getlibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncAssistantsClient.get_graphlibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncAssistantsClient.get_schemaslibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncAssistantsClient.get_subgraphslibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` and `namespace` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncAssistantsClient.updatelibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
SyncAssistantsClient.deletelibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
SyncAssistantsClient.get_versionslibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncAssistantsClient.set_latestlibs/sdk-py/langgraph_sdk/_sync/assistants.py
The function constructs a URL path for an API request by directly embedding the `assistant_id` without sanitization. A malicious `assistant_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
SyncCronClient.create_for_threadlibs/sdk-py/langgraph_sdk/_sync/cron.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to create resources under unintended paths.
SyncCronClient.deletelibs/sdk-py/langgraph_sdk/_sync/cron.py
The function constructs a URL path for an API request by directly embedding the `cron_id` without sanitization. A malicious `cron_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
SyncCronClient.updatelibs/sdk-py/langgraph_sdk/_sync/cron.py
The function constructs a URL path for an API request by directly embedding the `cron_id` without sanitization. A malicious `cron_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
SyncRunsClient.getlibs/sdk-py/langgraph_sdk/_sync/runs.py
The function constructs a URL path for an API request by directly embedding `thread_id` and `run_id` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncRunsClient.deletelibs/sdk-py/langgraph_sdk/_sync/runs.py
The function constructs a URL path for an API request by directly embedding `thread_id` and `run_id` without sanitization. Malicious inputs containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
SyncThreadsClient.getlibs/sdk-py/langgraph_sdk/_sync/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to access unintended API endpoints.
SyncThreadsClient.updatelibs/sdk-py/langgraph_sdk/_sync/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to modify unintended resources.
SyncThreadsClient.deletelibs/sdk-py/langgraph_sdk/_sync/threads.py
The function constructs a URL path for an API request by directly embedding the `thread_id` without sanitization. A malicious `thread_id` containing path traversal characters (e.g., '../') could allow an attacker to delete unintended resources.
Miggo AI
