https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 18:17:52 +0000 https://cve.radiocsirt.org/vuln/cve-2025-64104 <p><strong>Affected:</strong> langchain-ai langgraph</p> <p>LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph&#39;s SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. This vulnerability is fixed in 2.0.11.</p> <p><strong>Affected:</strong> langchain-ai langgraph</p> <p>LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph&#39;s SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. This vulnerability is fixed in 2.0.11.</p> https://cve.radiocsirt.org/vuln/cve-2025-64104 https://cve.radiocsirt.org/vuln/ghsa-7p73-8jqx-23r8 <p><strong>Affected:</strong> PyPI: langgraph-checkpoint-sqlite</p> <p>### Summary LangGraph&#39;s SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls.</p> <p>### Details [`/langgraph/libs/checkpoint-sqlite/langgraph/store/sqlite/base.py`](https://github.com/langchain-ai/langgraph/blob/ee5d052a07aadd76dae123a27009ea0a3694fa0a/libs/checkpoint-sqlite/langgraph/store/sqlite/base.py#L407)</p> <p>The key portion of the JSON path is concatenated directly into the SQL string without sanitation. There&#39;s a few different occurrences within the file.</p> <p>```python filter_conditions.append( &#34;json_extract(value, &#39;$.&#34; + key # &lt;-- Directly concatenated, no escaping! + &#34;&#39;) = &#39;&#34; + value.replace(&#34;&#39;&#34;, &#34;&#39;&#39;&#34;) # &lt;-- Only value is escaped + &#34;&#39;&#34; ) ```</p> <p>### Who is affected</p> <p>This issue affects **only developers or projects that directly use the `checkpoint-sqlite` store**.</p> <p>An application is vulnerable only if it: 1. Instantiates the `SqliteStore` from the `checkpoint-sqlite` package, **and** 2. Builds the `filter` argument using keys derived from **untrusted or user-supplied input** (such as query parameters, request bodies, or other external data).</p> <p>If filter keys are static or validated/allowlisted before being passed to the store, the risk does not apply.</p> <p>Note: users of LangSmith deployments (previously known as LangGraph Platform) are not affected as those deployments rely on a different checkpoin…</p> <p><strong>Affected:</strong> PyPI: langgraph-checkpoint-sqlite</p> <p>### Summary LangGraph&#39;s SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls.</p> <p>### Details [`/langgraph/libs/checkpoint-sqlite/langgraph/store/sqlite/base.py`](https://github.com/langchain-ai/langgraph/blob/ee5d052a07aadd76dae123a27009ea0a3694fa0a/libs/checkpoint-sqlite/langgraph/store/sqlite/base.py#L407)</p> <p>The key portion of the JSON path is concatenated directly into the SQL string without sanitation. There&#39;s a few different occurrences within the file.</p> <p>```python filter_conditions.append( &#34;json_extract(value, &#39;$.&#34; + key # &lt;-- Directly concatenated, no escaping! + &#34;&#39;) = &#39;&#34; + value.replace(&#34;&#39;&#34;, &#34;&#39;&#39;&#34;) # &lt;-- Only value is escaped + &#34;&#39;&#34; ) ```</p> <p>### Who is affected</p> <p>This issue affects **only developers or projects that directly use the `checkpoint-sqlite` store**.</p> <p>An application is vulnerable only if it: 1. Instantiates the `SqliteStore` from the `checkpoint-sqlite` package, **and** 2. Builds the `filter` argument using keys derived from **untrusted or user-supplied input** (such as query parameters, request bodies, or other external data).</p> <p>If filter keys are static or validated/allowlisted before being passed to the store, the risk does not apply.</p> <p>Note: users of LangSmith deployments (previously known as LangGraph Platform) are not affected as those deployments rely on a different checkpoin…</p> https://cve.radiocsirt.org/vuln/ghsa-7p73-8jqx-23r8