diff --git a/pyagentspec/constraints/constraints.txt b/pyagentspec/constraints/constraints.txt
index 84a8077f..adaf3e18 100644
--- a/pyagentspec/constraints/constraints.txt
+++ b/pyagentspec/constraints/constraints.txt
@@ -9,7 +9,7 @@ autogen-ext==0.7.4
 autogen-agentchat==0.7.4
 
 # LangGraph adapter
-langgraph==0.6.5
+langgraph==0.6.11
 langchain-core==0.3.75
 langchain-openai==0.3.30
 langchain-ollama==0.3.6
diff --git a/pyagentspec/setup.py b/pyagentspec/setup.py
index 083de0e6..22bd7274 100644
--- a/pyagentspec/setup.py
+++ b/pyagentspec/setup.py
@@ -73,6 +73,7 @@ def read(file_name):
             "langchain-core>=0.3,<1.0.0",
             "langchain-openai>=0.3.7",
             "langchain-ollama>=0.3.3",
+            "langgraph-checkpoint>=3.0.1,<4.0.0",  # To mitigate CVE-2025-64439
         ],
     },
 )