Product

@langchain langgraph-checkpoint-sqlite vulnerabilities

1 published CVE affecting @langchain langgraph-checkpoint-sqlite, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest @langchain langgraph-checkpoint-sqlite CVEs

Newest publication first

CVE-2025-67644 LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method
Published 2025-12-10

HighCVSS 7.8 EPSS 2.5%

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers to manipulate SQL qu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

@langchain langgraph-checkpoint-sqlite vulnerabilities

Latest @langchain langgraph-checkpoint-sqlite CVEs

CVE-2025-67644 LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method