- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 3 high, 2 medium
- Weekly downloads
- 904.1K
- Dependents
- 280
- Registry
- PyPI
Advisories 5
- CVE-2026-115883Medium 6.0
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
Affected: fixed in 3.1.2.
- CVE-2026-71433Medium 5.3
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
Affected: fixed in 3.1.1.
- CVE-2025-67644High 7.3
LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method
Affected: fixed in 3.0.1.
- CVE-2025-64104High 7.3
LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore
Affected: fixed in 2.0.11.
- CVE-2025-8709High 7.3
SQL Injection in langchain-ai/langchain
Affected: fixed in 2.0.11.