CVE-2025-8709
2 advisories.
PyPI/langgraph-checkpoint-sqlite CVE-2025-8709: high 7.3
LangGraph's SQLite store implementation has a SQL Injection Vulnerability
Action: Upgrade langgraph-checkpoint-sqlite to 2.0.11 or later.
pip install langgraph-checkpoint-sqlite==2.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.11 | - |
Fixed versions
| 2.0.11 |
Sources
- osv: GHSA-4h97-wpxp-3757
- https://nvd.nist.gov/vuln/detail/CVE-2025-8709
- https://github.com/langchain-ai/langgraph/pull/5666
- https://github.com/langchain-ai/langgraph/commit/bc9d45b476101e441cb1cc602dea03eb29232de4
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/releases/tag/checkpointsqlite%3D%3D2.0.11
- https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118
CVE-2025-8709 · published · modified · JSON
PyPI/langgraph-checkpoint-sqlite CVE-2025-8709: high 7.3
LangGraph's SQLite store implementation has a SQL Injection Vulnerability
Action: Upgrade langgraph-checkpoint-sqlite to 2.0.11 or later.
pip install langgraph-checkpoint-sqlite==2.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.11 | - |
Fixed versions
| 2.0.11 |
Sources
- osv: PYSEC-2026-1528
- https://nvd.nist.gov/vuln/detail/CVE-2025-8709
- https://github.com/langchain-ai/langgraph/pull/5666
- https://github.com/langchain-ai/langgraph/commit/bc9d45b476101e441cb1cc602dea03eb29232de4
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/releases/tag/checkpointsqlite%3D%3D2.0.11
- https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118
- https://pypi.org/project/langgraph-checkpoint-sqlite
- https://github.com/advisories/GHSA-4h97-wpxp-3757
CVE-2025-8709 · published · modified · JSON