GHSA-9rwj-6rc7-p77c
High · 7.3CVSS
7.3
EPSS
—
Published
Dec 10, 2025
CISA due date
—
The record
LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | langgraph-checkpoint-sqlite | 0 | 3.0.1 |
Related vulnerabilities
- CVE-2025-67644 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses… Same vulnerability
- GHSA-7p73-8jqx-23r8 LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore Also affects langgraph-checkpoint-sqlite
- CVE-2025-64104 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses… Also affects langgraph-checkpoint-sqlite
- GHSA-4h97-wpxp-3757 LangGraph's SQLite store implementation has a SQL Injection Vulnerability Also affects langgraph-checkpoint-sqlite
- CVE-2025-8709 A SQL injection vulnerability exists in the langchain-ai/langchain repository… Also affects langgraph-checkpoint-sqlite
- CVE-2026-87936 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
- CVE-2026-87938 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
- CVE-2026-114664 Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the… CWE-89