superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-67644 Source advisory: OSV:PYSEC-2026-1530...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2025-8709 Source advisory: OSV:PYSEC-2026-1528...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2025-64104 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2025-64104 Source advisory: OSV:PYSEC-2026-1529...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-64104 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-64104 Source advisory: OSV:PYSEC-2026-1529...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: OSV:PYSEC-2026-1528...

PYSEC-2026-1529 LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

Summary LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. Details /langgraph/libs/checkpoint-sqlite/langgraph/store/sqlite/base.py...

SQL Injection

langgraph-checkpoint-sqlite is vulnerable to SQL Injection. The vulnerability is due to use of direct string concatenation without proper parameterization in database queries, which allows an attacker to inject arbitrary SQL and bypass access controls...

SQL Injection

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to SQL Injection via the metadatapredicate function. An attacker can execute arbitrary SQL commands by supplying crafted metadata filter...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +21 more potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (>=1.0.4, <=3.0.0)

langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.0.45, =0.1.0a2, =0.1.0a1, =0.9.9, =0.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.4 - my-agent 0.1.0 - novachain 0.1.0 and more Source cves: CVE-2025-67644 Source advisory: MEND:CVE-2025-67644...

haistings (0.0.2) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by unknown CVE via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: unknown CVE Source advisory:...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2025-67644...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +21 more potentially affected by CVE-2025-64439 via langgraph-checkpoint-sqlite (>=1.0.4, <=2.0.11)

langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.0.45, =0.1.0a2, =0.1.0a1, =0.9.9, =0.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.4 - my-agent 0.1.0 - novachain 0.1.0 and more Source cves: CVE-2025-64439 Source advisory: MEND:CVE-2025-64439...