635 matches found
agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)
langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...
agent-api-server (>=2.1.7, <=2.1.13), alphasix-axiom (>=1.1.3, <=1.1.22) +17 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (>=3.0.0, <=3.1.0)
langgraph-checkpoint-postgres PYPI version =3.0.0, =2.1.7, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.1.0, =0.8.0, =0.11.1, =0.11.1, =1.0.0.dev7, =1.0.0, =1.0.0.dev7, =3.60.0 and more Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...
agent-nexus-cli (>=0.1.0, <=0.1.31), alphasix-axiom (>=1.1.3, <=1.1.22) +11 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=3.0.0, <=3.1.0)
langgraph-checkpoint-sqlite PYPI version =3.0.0, =0.1.0, =1.1.3, =0.0.19, =0.9.16, =0.1.2, =0.1.2, =0.8.0, =0.1.3, =0.2.0b1, =0.0.1, =0.1.22, =1.5.0, =0.0.121, =0.0.123 Source cves: CVE-2026-71433 Source advisory: GHSA-47PJ-3JCM-6WHG...
CVE-2026-71433
LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...
agent-nexus-cli (>=0.1.0, <=0.1.31), agentfoundry (1.2.9.1) +31 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (>=1.0.4, <=3.1.0)
langgraph-checkpoint-sqlite PYPI version =1.0.4, =0.1.0, =0.0.45, =0.1.0a2, =1.1.3, =0.1.0a1, =0.0.19, =0.9.9, =0.1.2, =0.1.2, =0.0.2, =0.0.1, =0.0.2 and more Source cves: CVE-2026-71433 Source advisory: MEND:CVE-2026-71433...
EUVD-2026-54227
LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...
agent-api-server (>=2.1.7, <=2.1.13), airflow-chat (>=0.1.0a2, <=0.1.0a7) +33 more potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (>=1.0.0, <=3.1.0)
langgraph-checkpoint-postgres PYPI version =1.0.0, =2.1.7, =0.1.0a2, =1.1.3, =1.9.0, =0.1.3, =0.1.18, =0.1.57, =0.0.2, =1.0.0, =1.0.9, =1.2.13 and more Source cves: CVE-2026-71433 Source advisory: MEND:CVE-2026-71433...
CVE-2026-71433 LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...
PT-2026-68801
Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-postgres versions prior to 3.1.1 langgraph-checkpoint-sqlite versions prior to 3.1.1 Description The Postgres and SQLite implementations of LangGraph's checkpoint saver persist hierarchical namespaces as dot-joined strings...
CVE-2026-71433: Exposure of Sensitive Information to an Unauthorized Actor
LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by...
ROOT-APP-PYPI-CVE-2026-48775 CVE-2026-48775 in langgraph-checkpoint - Patched by Root
Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
@flutchai/flutch-sdk (>=0.2.7, <=0.2.8), @sonic-agent-kit/agent-setup-lib (>=1.0.5, <=1.0.6) +1 more potentially affected by CVE-2026-48121 via @langchain/langgraph-checkpoint-mongodb (>=0.0.2, <=1.0.0)
@langchain/langgraph-checkpoint-mongodb NPM version =0.0.2, =0.2.7, =1.0.5, =1.0.0, =1.0.27 Source cves: CVE-2026-48121 Source advisory: MEND:CVE-2026-48121...
CLSA-2026-1783472544 TuxCare security update for langgraph-checkpoint (1 CVE)
TuxCare rebuilt langgraph-checkpoint to address 1 CVE. Fixed in 2.1.2.post3+tuxcare...
CLSA-2026-1780966309 TuxCare security update for langgraph-checkpoint (1 CVE)
TuxCare rebuilt langgraph-checkpoint to address 1 CVE. Fixed in 2.1.2.post2+tuxcare...
CLSA-2026-1779670109 TuxCare security update for langgraph-checkpoint (1 CVE)
TuxCare rebuilt langgraph-checkpoint to address 1 CVE. Fixed in 2.1.2.post1+tuxcare...