{"action":"Upgrade langgraph-checkpoint-sqlite to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"langgraph-checkpoint-sqlite","cve_ids":["CVE-2025-67644"],"ecosystem":"PyPI","epss":0.02306,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-9rwj-6rc7-p77c","id":"tcs_01M5KFBH9011TC5SYGT06BEE52","modified_at":"2026-07-07T17:56:34.997556097Z","published_at":"2025-12-10T00:02:21Z","references":["https://osv.dev/vulnerability/GHSA-9rwj-6rc7-p77c","https://github.com/langchain-ai/langgraph/security/advisories/GHSA-9rwj-6rc7-p77c","https://nvd.nist.gov/vuln/detail/CVE-2025-67644","https://github.com/langchain-ai/langgraph/commit/297242913f8ad2143ee3e2f72e67db0911d48e2a","https://github.com/langchain-ai/langgraph"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-9rwj-6rc7-p77c","url":"https://osv.dev/vulnerability/GHSA-9rwj-6rc7-p77c"}],"summary":"LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method"}