2 matches found
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
6.8CVSS5.6AI score0.00355EPSS
SaveExploits0References7
CVE-2026-48121: Improper Neutralization of Special Elements in Data Query Logic
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
6.7CVSS5.6AI score0.00355EPSS
SaveExploits0References2
20