SQL Injection

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to SQL Injection due to untrusted metadata filter keys being directly used in SQL queries without proper validation. An attacker can acces...

LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method

Context A SQL injection vulnerability exists in LangGraph's SQLite checkpoint implementation that allows attackers to manipulate SQL queries through metadata filter keys. This affects applications that accept untrusted metadata filter keys not just filter values in checkpoint search operations...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by unknown CVE via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: unknown CVE Source advisory:...

GHSA-9RWJ-6RC7-P77C LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method

Context A SQL injection vulnerability exists in LangGraph's SQLite checkpoint implementation that allows attackers to manipulate SQL queries through metadata filter keys. This affects applications that accept untrusted metadata filter keys not just filter values in checkpoint search operations...

freiburg-ris-ca (0.1.0), my-agent (0.1.0) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (1.0.4)

langgraph-checkpoint-sqlite PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - freiburg-ris-ca 0.1.0 - my-agent 0.1.0 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

agentfoundry (1.2.9.1), agentic-graph-composer (0.1.0) +14 more potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.11)

langgraph-checkpoint-sqlite PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - agentfoundry 1.2.9.1 - agentic-graph-composer 0.1.0 - ai-security-analyzer =0.0.45, =0.1.0a2, =0.1.0a1,...

superset-chat (>=0.1.0a1, <=0.1.0a24) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.0)

langgraph-checkpoint-sqlite PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - superset-chat =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

haistings (0.0.2) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.5)

langgraph-checkpoint-sqlite PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - haistings 0.0.2 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

katalyst (0.9.1), paper-sage (1.0.5) +2 more potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.10)

langgraph-checkpoint-sqlite PYPI version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - katalyst 0.9.1 - paper-sage 1.0.5 - quietfail 0.1.0 - quoriv =1.0.1, =1.2.0 Source cves: CVE-2025-67644...

PT-2025-50558

Name of the Vulnerable Software and Affected Versions LangGraph versions 3.0.0 and below Description The LangGraph SQLite Checkpoint component, used for saving data with SQLite databases, has a flaw. Versions 3.0.0 and below are susceptible to SQL injection. This occurs because the metadata...

K000158128: SQLite vulnerability CVE-2025-6965

Security Advisory Description There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. CVE-2025-6965 Impact There...

📄 Exim 4.98 SQL Injection

A vulnerability exists in Exim version 4.98 when ETRN input is serialized and passed to a SQLite backend. Time‑based SQL injection allows attackers to detect conditions in SQL execution measuring response latency...

漏洞扫描系统

This is a Python web application built using the Flask framework, designed to scan Windows systems for vulnerabilities. The application has several features, including user authentication, task management, and vulnerability scanning. Here is a summary of the key points: User Authentication The...

F5 Networks BIG-IP : SQLite vulnerability (K000158050)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000158050 advisory. SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5)

The version of AOS installed on the remote host is prior to 7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5 advisory. - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

K000158050: SQLite vulnerability CVE-2019-8457

Security Advisory Description SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables. CVE-2019-8457 Impact This vulnerability allows a remote, low-privileged user to trigger a heap out-of-bounds read in the...

ROS-20251203-20

A vulnerability in the setupLookaside function of the SQLite database management system is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...