CVE-2026-55253
4 advisories.
PyPI/langgraph-checkpoint-mongodb CVE-2026-55253: high 7.7
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
Action: Upgrade langgraph-checkpoint-mongodb to 0.3.0 or later.
pip install langgraph-checkpoint-mongodb==0.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0 | - |
Fixed versions
| 0.3.0 |
Sources
- osv: GHSA-533j-2v4q-mw5h
- https://github.com/langchain-ai/langchain-mongodb/security/advisories/GHSA-533j-2v4q-mw5h
- https://github.com/langchain-ai/langchain-mongodb
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-checkpoint-mongodb%2Fv0.4.0
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-store-mongodb%2Fv0.3.0
CVE-2026-55253 · published · modified · JSON
PyPI/langgraph-store-mongodb CVE-2026-55253: high 7.7
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
Action: Upgrade langgraph-store-mongodb to 0.4.0 or later.
pip install langgraph-store-mongodb==0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-533j-2v4q-mw5h#PyPI/langgraph-store-mongodb
- https://github.com/langchain-ai/langchain-mongodb/security/advisories/GHSA-533j-2v4q-mw5h
- https://github.com/langchain-ai/langchain-mongodb
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-checkpoint-mongodb%2Fv0.4.0
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-store-mongodb%2Fv0.3.0
CVE-2026-55253 · published · modified · JSON
PyPI/langgraph-checkpoint-mongodb CVE-2026-55253: high 7.7
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
Action: Upgrade langgraph-checkpoint-mongodb to 0.3.0 or later.
pip install langgraph-checkpoint-mongodb==0.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0 | - |
Fixed versions
| 0.3.0 |
Sources
- osv: PYSEC-2026-3859
- https://github.com/langchain-ai/langchain-mongodb/security/advisories/GHSA-533j-2v4q-mw5h
- https://github.com/langchain-ai/langchain-mongodb
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-checkpoint-mongodb%2Fv0.4.0
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-store-mongodb%2Fv0.3.0
- https://pypi.org/project/langgraph-checkpoint-mongodb
- https://github.com/advisories/GHSA-533j-2v4q-mw5h
- https://nvd.nist.gov/vuln/detail/CVE-2026-55253
CVE-2026-55253 · published · modified · JSON
PyPI/langgraph-store-mongodb CVE-2026-55253: high 7.7
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
Action: Upgrade langgraph-store-mongodb to 0.4.0 or later.
pip install langgraph-store-mongodb==0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: PYSEC-2026-3860
- https://github.com/langchain-ai/langchain-mongodb/security/advisories/GHSA-533j-2v4q-mw5h
- https://github.com/langchain-ai/langchain-mongodb
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-checkpoint-mongodb%2Fv0.4.0
- https://github.com/langchain-ai/langchain-mongodb/releases/tag/libs%2Flanggraph-store-mongodb%2Fv0.3.0
- https://pypi.org/project/langgraph-store-mongodb
- https://github.com/advisories/GHSA-533j-2v4q-mw5h
- https://nvd.nist.gov/vuln/detail/CVE-2026-55253
CVE-2026-55253 · published · modified · JSON