CVE-2026-115883Published
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
cve-program · CVE-2026-115883
Publishedlanggraph
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "langchain-ai",
"product": "langgraph",
"versions": [
{
"version": "< 1.2.15",
"status": "affected"
}
]
}langgraph-checkpoint-postgres
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "langchain-ai",
"product": "langgraph-checkpoint-postgres",
"versions": [
{
"version": "< 3.1.3",
"status": "affected"
}
]
}langgraph-checkpoint-sqlite
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "langchain-ai",
"product": "langgraph-checkpoint-sqlite",
"versions": [
{
"version": "< 3.1.2",
"status": "affected"
}
]
}