{"action":"Upgrade langgraph-checkpoint-sqlite to 2.0.11 or later.","affected":[{"fixed":"2.0.11","introduced":"0"}],"component":"langgraph-checkpoint-sqlite","cve_ids":["CVE-2025-64104"],"ecosystem":"PyPI","epss":0.00241,"exploited":false,"fixed_versions":["2.0.11"],"ghsa_id":"GHSA-7p73-8jqx-23r8","id":"tcs_01M5KGT53F6RDX3315T9TV6J8V","modified_at":"2026-07-07T17:46:36.751836071Z","published_at":"2026-07-07T16:03:08.929810Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1529","https://github.com/langchain-ai/langgraph/security/advisories/GHSA-7p73-8jqx-23r8","https://nvd.nist.gov/vuln/detail/CVE-2025-64104","https://github.com/langchain-ai/langgraph/commit/bc9d45b476101e441cb1cc602dea03eb29232de4","https://github.com/langchain-ai/langgraph","https://pypi.org/project/langgraph-checkpoint-sqlite","https://github.com/advisories/GHSA-7p73-8jqx-23r8"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1529","url":"https://osv.dev/vulnerability/PYSEC-2026-1529"}],"summary":"LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore"}