Vulnerabilities for langgraph-checkpoint-sqlite

First version without a known vulnerability: 3.1.1

Details

• GHSA-47pj-3jcm-6whg2026-08-06

  LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

  Fixed in: 3.1.1

• GHSA-9rwj-6rc7-p77c2025-12-10

  LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method

  Fixed in: 3.0.1

• GHSA-7p73-8jqx-23r82025-10-29

  LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore

  Fixed in: 2.0.11

• GHSA-4h97-wpxp-37572025-10-26

  LangGraph's SQLite store implementation has a SQL Injection Vulnerability

  Fixed in: 2.0.11