langchain-langgraph-streaming
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalyreferences/websocket-and-reconnect.md
LOWAnomalyLOW
references/websocket-and-reconnect.md
No malicious behavior or intentional obfuscation is evident. The code is an example of WebSocket-based LangGraph streaming, but it has significant application-level security gaps if used without additional controls: unauthenticated client-selected thread IDs can enable cross-user state access, and missing input/resource limits can permit denial of service. The reconnect documentation also overstates automatic resumption of an in-flight invocation.
Confidence: 96%Severity: 67%
Audit Metadata