Skip to content
OpenAdvisories

Product · langchain-ai

langgraphjs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-48121 Public exploit

    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

    @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from con…

    langchain-ai langgraphjs @langchain/langgraph-checkpoint-mongodb npm
  • Medium 6.5
    CVE-2026-27022

    RediSearch Query Injection in @langchain/langgraph-checkpoint-redis

    @langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint-redis package's filter handling. The RedisSaver and ShallowRedisSaver classes c…

    langchain-ai langgraphjs @langchain/langgraph-checkpoint-redis npm