{"action":"Upgrade langgraph-checkpoint-sqlite to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"langgraph-checkpoint-sqlite","cve_ids":["CVE-2025-67644"],"ecosystem":"PyPI","epss":0.02306,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-9rwj-6rc7-p77c","id":"tcs_01M5KGT5DN5K9HP2331FVB8YS8","modified_at":"2026-07-07T17:46:36.795807386Z","published_at":"2026-07-07T16:03:12.694748Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1530","https://github.com/langchain-ai/langgraph/security/advisories/GHSA-9rwj-6rc7-p77c","https://nvd.nist.gov/vuln/detail/CVE-2025-67644","https://github.com/langchain-ai/langgraph/commit/297242913f8ad2143ee3e2f72e67db0911d48e2a","https://github.com/langchain-ai/langgraph","https://pypi.org/project/langgraph-checkpoint-sqlite","https://github.com/advisories/GHSA-9rwj-6rc7-p77c"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1530","url":"https://osv.dev/vulnerability/PYSEC-2026-1530"}],"summary":"LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method"}